Almeida Law Group is investigating a data breach at Fun For Less Tours, Inc. The breach occurred on October 27th, 2025. If you were affected, contact Almeida Law Group.
About Fun For Less Tours, Inc.
Fun For Less Tours, Inc. is a BBB-accredited travel agency headquartered in Draper, Utah, specializing in worldwide tours, cruises, and educational trips. The company is particularly known for LDS (Latter-day Saints) themed travel, with destinations spanning Africa, Europe, the Caribbean, and the Middle East, including Holy Land Tours. As a travel agency, it collects personal information from customers booking international trips, which can include identification documents and contact details.
What Happened?
Fun For Less Tours, Inc. was listed in a California Attorney General sample breach notice filed on September 21st, 2026. According to the notice, the company discovered on October 27th, 2025 that it was the victim of a ransomware attack. Upon discovering the incident, the company secured its systems and notified law enforcement. Its investigation determined that an unknown, unauthorized third party accessed its computer network and acquired certain files. On March 23rd, 2026, the company completed its review and determined that the acquired files contained personal information belonging to affected individuals. The specific data types are not disclosed in the publicly available notice text, which uses a template placeholder in place of the breached elements. The company is offering affected individuals a complimentary one-year membership in Experian IdentityWorks Credit 3B.
Separately, the Anubis ransomware group claimed Fun For Less Tours as a victim on its dark web leak site on or around December 1st, 2025, alleging that customer passports and personal data were exposed. This claim was reported by RedPacket Security and tracked by Ransomware.live. These are attacker-side allegations and have not been independently confirmed by the company. Anubis is a ransomware-as-a-service group active since late 2024 that employs double-extortion tactics, combining data theft with encryption and threatening public disclosure of stolen data.
Key Facts at a Glance
- Company or Organization: Fun For Less Tours, Inc.
- Industry: Hospitality and Tourism / Travel Agency
- Location: Draper, Utah
- Incident type: Ransomware attack; unauthorized access and acquisition of files
- Date of breach: October 27th, 2025
- Date breach discovered: October 27th, 2025
- Date of consumer notification: September 21st, 2026
- Identity theft protection offered: Experian IdentityWorks Credit 3B (one-year complimentary membership)
- Litigation status: No class action lawsuits or public litigation connected to this breach were found as of September 2026
- Source: California Attorney General Breach Report; RedPacket Security – Anubis Ransomware Victim: Fun For Less Tours; BlackFog – Anubis Ransomware Profile
What Should You Do?
If you received a notice from Fun For Less Tours, Inc., you should enroll in the complimentary Experian IdentityWorks Credit 3B membership offered by the company before your enrollment deadline passes. You should also consider placing a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to help prevent unauthorized accounts from being opened in your name. Monitor your existing financial accounts closely for any suspicious activity, and request your free credit reports at AnnualCreditReport.com to review them for unfamiliar accounts or inquiries. If you believe your information has already been misused, visit IdentityTheft.gov for a personalized recovery plan and resources.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
