Nearly 100,000 scans of passports and identity documents stolen from Italian hotels

Tens of thousands of scans of tourists' identity documents have been stolen from Italian hotel servers and put up for sale on the dark web, the Italian Digital Agency (Agid) has warned. Agid "has detected an illegal sale of identity documents that were allegedly stolen from hotels operating on Italian territory ," it announced in a statement on Thursday, August 14. These are tens of thousands of high-resolution scans of passports, identity cards, and other identity documents used by guests during check-in operations."

The agency, in several successive press releases in recent days, has mentioned nearly 100,000 documents stolen. The author who put these documents up for sale, known under the pseudonym "mydocs" , declared that he had obtained them "through unauthorized access to computer systems, between June and August 2025" . In total, ten hotels located on Italian territory are affected by this hack, but "it is not excluded that other cases could emerge in the coming days" , warn the authorities.

Skip the ad

The agency also warns of the "consequences for victims which can be serious, both economically and legally" , recalling that this data, once stolen, "can be used for fraudulent purposes: creation of false documents, opening of bank accounts, digital identity theft" .

Hotels and hotel booking platforms are regularly targeted by cyberattacks, with the Marriott and Caesars groups and Booking.com, among others, falling victim.