This is as serious as it gets. Total number of exposed records is still TBC but I suggest that all of 12trip customers were there. Emails/names/passports/phones/partial payment info/travel data/internal keys and passwords.