Data security incident

Information for our customers: security incident involving ski hire booking data

Published on 21/08/2026 · Last updated on 27/08/2026

Sport 2000 has been informed that a security incident affected one of its internal ski equipment hire booking management tools, and that certain personal data relating to bookings may have been accessed, and potentially made public, by an unauthorised third party. We are communicating transparently about this incident, its possible consequences and the precautions you should take.

What happened

On 20 August 2026, we learned that an unauthorised third party had accessed our internal ski hire booking system and viewed, and potentially retrieved, booking data before making at least some of it publicly available. If you have made such a booking, your data may be affected.

Data that may be affected

Depending on the booking, the information that may have been exposed may include:

• customer contact details: first name and surname, postal address, email address and, where applicable, telephone number and age;
• booking information: shop, dates of stay, equipment booked, booking reference, insurance, loyalty benefits, amounts, discounts, amounts paid/balance;
• information used to prepare ski equipment (for example, shoe size, height, weight range and ability level).

This incident does not concern any banking information (including bank card numbers or IBANs), nor any customer passwords.

Risks you should be aware of

Because they contain genuine booking details, this information could be used to send you highly convincing fraudulent messages (emails, SMS or phone calls) — for example, by pretending to be Sport 2000, Ekosport Rent or one of their shops — in order to persuade you to provide personal or banking information, or to make a payment. Please remain vigilant.

How to protect yourself

• Stay vigilant when receiving any message or call referring to a Sport 2000 or Ekosport-Rent booking, even if it appears legitimate and contains accurate information.
• Never provide banking details, login details or passwords in response to an unsolicited message.
• Do not click on links in suspicious messages or open unexpected attachments.
• Verify any request by going directly to the website: https://location-ski.sport2000.fr (by entering the address yourself in your browser) or by contacting customer services at serviceclient@sport2000.fr or your usual shop using contact details you already know.
• Be wary of any request for payment, reimbursement or booking “confirmation” received by message.
• You can also find advice and information on the https://www.cybermalveillance.gouv.fr website.

Measures we have taken

• Secured the affected system and strengthened our protective measures.
• Carried out an in-depth investigation to determine the origin and extent of the incident.
• Notified the incident to the French data protection authority (CNIL).
• Filed a complaint with the Gendarmerie.
• Individually informed customers affected by the incident.

Your contact

For any questions relating to this incident or your personal data, you can contact our Data Protection Officer by email at: dpo@sport2000.fr or by post: DPO Sport2000 - Route d’Ollainville, 91520 Egly, France.

You have rights regarding your personal data (access, rectification, erasure, objection, etc.), which you can exercise by contacting us. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

We apologise for any inconvenience caused and remain fully committed to protecting your data.

The Sport 2000 team