alltours.nl

alltours.nl operates an online platform headquartered in the Netherlands. The service enables customers to make bookings through its website. By processing reservation requests, the organization handles personal data associated with those bookings. Its primary activity involves facilitating travel‑related services for consumers. The exact geographic scope of its market is not disclosed in the available information. The Dutch‑registered domain suggests a focus on the Netherlands, though it may serve customers elsewhere. The platform is the main channel for interacting with clients and completing transactions. It collects and stores booking details to fulfil service obligations. Consequently, safeguarding customer information is an essential aspect of its operations. Maintaining the security and reliability of the web infrastructure is therefore a continuous requirement.

The organization has demonstrated a defined incident response procedure when security breaches occur. In two separate incidents in early and late 2025, unauthorized access to customer booking data was detected via the alltours.nl website. Upon identification, the internal IT team promptly closed the exploited security vulnerability. The company then notified all potentially affected customers about the breach. Subsequent investigation found no evidence that the accessed personal data were further misused. Each incident was reported to the relevant data protection authority and to police. alltours.nl cooperated with law enforcement agencies and external cybersecurity experts during the investigations. A formal criminal complaint was filed in relation to the attacks. These actions reflect a commitment to transparency, regulatory compliance, and customer protection. The repeated ability to contain and remediate vulnerabilities indicates a mature approach to security management.