Anywayanyday cyberattack

The travel agency attributed service restrictions to cyberattack recovery; the exact attack date remains unestablished.

Last modified

Summary

  • Environment: Online travel-booking IT infrastructure
  • Operational impact: New bookings suspended according to company-attributed reporting
  • Financial impact: No incident cost established in the reviewed evidence
  • Record status: Developing record. Reviewed October 14, 2026; updated as evidence emerges.

What happened

Anywayanyday attributed service restrictions to recovery from a cyberattack on its IT infrastructure. Its Russian-language statement said restoration was continuing. [1]

Impact

The Record’s October 14 report, citing the company, says new airline, train and hotel bookings were suspended while confirmed reservations remained valid. [2] Anywayanyday said it had not identified signs of a personal-data leak; that assessment does not prove no exposure occurred. [1]

Timeline

  1. Booking disruption reported

    The company-confirmed disruption was reported publicly. This date does not establish when the attack began.

    [2]
  2. Briefing updated

    This briefing was last reviewed and updated on October 14, 2026.

Threat Group & Attack Vector

The statement does not identify an attacker, intrusion method or malware. [1]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

Anywayanyday said it strengthened protection, engaged Russian information-security firms and notified regulators while restoring availability. [1]