Fun For Less Tours Data Breach: PHI and PII Exposed

Fun For Less Tours, a family-owned travel agency and travel club based in Draper, Utah, disclosed a data breach that exposed sensitive personal information belonging to consumers.

The breach was reported to the attorneys general offices of Texas and Vermont starting on Sept. 21, 2026. So far, 328 residents of Texas were affected.

On Nov. 30, 2025, the Anubis ransomware group posted on the dark web, claiming it had obtained data belonging to Fun For Less Tours and intended to publish the stolen information within 10 to 11 days.

The types of personal information exposed in the breach included names, addresses, dates of birth, government-issued identification numbers (such as passports and state ID cards), financial information (such as account numbers and credit or debit card numbers) and medical information.

Fun For Less Tours' response to the breach

Fun For Less Tours is notifying affected consumers by U.S. Mail.

Consumers who have questions about the breach or wish to contact the company can reach Fun For Less Tours by phone at 801-619-1022 or toll-free at 800-591-2432. The company's business hours are Monday through Friday, 9 a.m. to 5 p.m. Its office is located at 392 E. 12300 South, Suite D, Draper, Utah 84020.