Security notice
Last updated: 21 August 2026
Between 10 and 18 August 2026, an unauthorised third party accessed one of our internal systems and copied data relating to Yacht Week and Ski Week.
We discovered this on 19 August and took immediate action to secure our systems and prevent further access. We have reported the incident to the relevant authorities and are continuing to investigate.
WHAT WAS AFFECTED
This varies by person and by brand, and included some or all of:
- —Names, email addresses, phone numbers and addresses
- —Passport and identity document details, dates of birth and nationality, collected for crew lists required by port authorities
- —COVID-19 vaccination status recorded at check-in in 2021
- —Payment records and stored card references
- —Bank details for a small number of crew and suppliers
- —Ski Week and Quarterdeck account passwords
Card security codes (CVV) were not affected — we never store them. For almost everyone, full card numbers were not affected. We identified a small number of exceptions and are contacting those people directly.
Yacht Week account passwords were not affected.
WHAT TO DO?
Everyone: be alert to unexpected emails, calls or messages about this incident or your bookings. We will never send you a password reset link you didn't request, or ask you to reply with card or bank details.
If your passport details were included: watch for anyone using your identity to open accounts or verify themselves. You can report identity fraud to your national police or data protection authority if you find something .
Are you contacting people individually?
Yes — everyone affected for whom we hold a working email address will be notifed via email.