This page covers both Yacht Week and Ski Week. Where the answer differs between them, both are given — take the line that applies to you.

The steps below are the ones that actually reduce your risk. None of them costs anything.

This is the risk that matters most, because identity details cannot be reissued the way a card can. Look out for letters, emails or calls about accounts, loans or credit applications you did not make. If something arrives that you do not recognise, follow it up rather than filing it.

This applies equally to Yacht Week and Ski Week guests.

Most countries have credit reference agencies or credit bureaus that will place a fraud alert or a freeze on your file at no charge. A freeze stops most new credit being opened in your name until you lift it. The bodies differ by country, so search for the ones that operate where you live, or ask us and we will point you to them.

Ski Week. Your account password was among the data copied. It was not stored in readable form, but the method protecting it is outdated and can be reversed with current computing power. Change it now.

Yacht Week. Yacht Week account passwords were not among the data copied — the table holding them was never accessed. There is one exception: if you were a Yacht Week skipper or crew member, your record was most likely moved to Quarterdeck when that company was set up, and the Quarterdeck position is different. If that is you, write to us and we will check your specific record.

Both. If you have used the same password on any other service, change it there regardless of which brand you travelled with. Whoever holds this data also holds your email address, and reused passwords are the most common way one incident turns into several.

The card reference we held is a token and cannot be used to take a payment, so there is no specific reason to expect card fraud. Checking your statements is still never wasted. This is the same for both brands.

Expect more convincing scam attempts than usual, by email, text and phone. Someone referencing your trip, your dates or your booking is not thereby proving they are us. Verify independently before acting, and never through a link or number supplied in the message itself.

We are not making outbound calls about this incident, for either brand. Any phone call claiming to be us about it is not us.

If you see anything that looks like misuse of your information, tell us. Write to the notice address on your security notice — Yacht Week and Ski Week each have their own — and we will look at your case individually rather than sending you the general guidance again.