The Alhambra, Granada's famous palace that is one of the most-visited monuments in Spain, has taken urgent steps to increase data protection on its ticket sales website. The move comes after an online newspaper claimed it was full of security breaches.
El Confidencial said that the personal data of 4.5 million private individuals who have bought tickets in the last two years, plus data of 1,000 travel agents, was easily available to be downloaded using relatively unsophisticated computer hacking techniques. This data included names, phone numbers and emails, said the newspaper.
It also said that a fairly common type of firewall was not in place and that old data was not removed to another server when not required to avoid all information being potentially stolen at once.
The trustees that run the Alhambra, overseen by the Junta de Andalucía, have said that steps to increase the protection of the website have already been taken by the company contracted to run it. It says that "no personal data has been accessed", although it added that there may have been an attempted access between 18 and 22 February.