Booking.com has notified customers that hackers accessed personal data in a security incident. The compromised information includes names, emails, physical addresses, and phone numbers.
The travel booking platform confirmed the breach affecting an unspecified number of users. The company's notification did not specify the breach timeline or the total number of affected customers.
■ What Was Accessed
According to the company's disclosure, the exposed data includes:
- Full names
- Email addresses
- Physical addresses
- Phone numbers
Booking.com did not indicate whether payment information, passport details, or other sensitive travel data were compromised in the incident.
■ Company Response
The platform is investigating the security incident and has notified affected users directly. Customers were advised to monitor their accounts for suspicious activity and consider changing their passwords.
Booking.com did not immediately provide details about how the breach occurred, whether a ransom was demanded, or if law enforcement was involved in the investigation.
■ Industry Context
The breach adds to a growing list of security incidents targeting major travel and hospitality companies. Large repositories of personal information make these platforms attractive targets for cybercriminals seeking to steal customer data for identity theft, fraud, or resale on dark web marketplaces.
Users of travel booking services typically store extensive personal information on these platforms, including contact details, travel preferences, and sometimes payment methods.
■ Recommended Actions
Affected customers should watch for phishing emails claiming to be from Booking.com and verify any communications directly through the official website. Changing passwords is recommended as a precaution, particularly if the same credentials are used across multiple accounts.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.