We use cookies to improve, measure and analyze the use of the website as well as for visitor statistics and marketing.

Stäng

Important information about a data breach

On 27 October, Skansen was informed that its ticket provider, Visit, had suffered a data breach. Affected guests have been contacted by email.

Read more

  • Information about a data breach affecting Skansen’s ticketing provider

    Last updated: 28 October, 09:20

    On Tuesday 27 October, Skansen was informed that its ticketing provider, Visit, had suffered a data breach. The incident primarily affects guests who made bookings between 23 and 26 October. Skansen contacted all affected guests by email on Tuesday evening.

    Personal information, including names, postal addresses, telephone numbers, email addresses and ticket purchase details, may have been accessed by unauthorised parties. No personal identity numbers, payment details or card information have been compromised, as these are not stored in the ticketing system when bookings are made.

    Skansen advises guests to remain vigilant against targeted phishing attempts and other forms of fraud. If you receive an email, text message or other communication referring to your booking, tickets or a refund, please exercise extra caution and check that it genuinely comes from Skansen.

    What can I do?

    Be particularly cautious of emails, text messages and telephone calls concerning:

    • Your purchase
    • Tickets or ticket delivery
    • Refunds
    • Payments or requests for additional information

    Do not click on links or open attachments in unexpected or suspicious messages. Never share payment card details, passwords or BankID credentials by email or text message. Skansen will never ask you to provide this information.

    If you receive a suspicious message, do not reply or click on any links. If you are unsure whether a message is genuine, contact Skansen via info@skansen.se.

    What is Skansen doing?

    Skansen takes this incident seriously and is in close contact with Visit. According to Visit, the security vulnerability has been resolved and an investigation into the incident is ongoing.

Q/A

  • What happened?

    Skansen’s ticketing provider, Visit, has suffered a data breach. Skansen was informed of the incident on the afternoon of Tuesday 27 October 2026. The breach occurred at Visit and has also affected other customers of the provider.

  • What information may have been affected?

    Personal information that may have been accessed by unauthorised parties includes names, telephone numbers, email addresses and details of ticket purchases.

    According to the information Skansen has received from its ticketing provider, no personal identity numbers or payment card details have been affected.

  • How do I know if my information has been affected?

    On the evening of Tuesday 27 October, Skansen sent an information email to the email addresses identified as potentially affected by the data breach.

    If you received this email, your personal information may have been affected by the incident.

  • What can I do to protect myself?

    Be particularly vigilant about unexpected emails, text messages and telephone calls. Personal information such as names, contact details and purchase information may be used in attempted fraud.

    Do not click on suspicious links or disclose passwords, BankID codes or payment card details to anyone who contacts you.

    If you are unsure whether a message genuinely comes from Skansen, please contact us at info@skansen.se.

  • What should I do if I have clicked on a suspicious link or shared personal information?

    If you have clicked on a suspicious link, remain vigilant. If you have disclosed any passwords, change them immediately.

    If you have shared payment details or used BankID in response to a suspicious message, contact your bank immediately.

    If you suspect that you have been a victim of fraud, you should also report it to the police.

  • I have purchased tickets but have not received an email. What does this mean?

    Skansen has contacted the guests who, based on the information currently available, are believed to be potentially affected.

    If you purchased tickets between 23 and 26 October but have not received an email and are concerned, please contact info@skansen.se.

  • What is Skansen doing in response to the incident?

    Skansen takes this incident very seriously and is working to establish the full extent of the breach and ensure that necessary measures are taken.

    The ticketing provider has stated that the security vulnerability has been resolved and that a cybersecurity company is conducting a thorough investigation.

  • Have Skansen’s own systems been compromised?

    The information Skansen has received concerns a data breach at its ticketing provider, Visit.

  • Is this incident connected to vulnerabilities identified in the PHP programming language?

    No. According to the information Skansen has received, there is no connection between the data breach at its ticketing provider and the recently reported vulnerabilities in PHP.

  • Who can I contact if I have questions?

    If you have any questions about the incident or how Skansen handles personal information, please contact info@skansen.se.

  • Can I still buy tickets to Skansen?

    Yes. Ticket sales are operating as normal, and you can continue to purchase tickets to Skansen.