DistantNews
Booking.com Confirms Data Breach, Warns of Phishing Risks
๐Ÿ‡ฌ๐Ÿ‡ท Greece /Technology

Booking.com Confirms Data Breach, Warns of Phishing Risks

From Ta Nea · (2d ago) Greek Critical tone

Translated from Greek, summarized and contextualized by DistantNews.

TLDR

  • Booking.com confirmed a data breach where unauthorized parties may have accessed customer booking information.
  • The exposed data could include names, emails, phone numbers, and booking details, but not financial information.
  • The company has reset PINs for affected bookings and advises users to avoid suspicious links and verify requests directly with accommodations.

Booking.com, a global leader in accommodation bookings, has confirmed a security incident. Unauthorized third parties may have accessed sensitive customer information, raising concerns among travelers worldwide. The company stated that the breach could involve names, email addresses, phone numbers, and booking specifics, though it emphasized that financial data was not compromised.

We inform you that unauthorized third parties may have had access to certain booking information related to your booking.

โ€” Booking.com notificationThis quote is from the notification sent to affected customers, confirming the data breach.

While the full extent of the breach remains unclear, the sheer scale of Booking.com's operationsโ€”over 6.8 billion bookings since 2010 and connections to over 30 million propertiesโ€”underscores the potential impact. The incident highlights the sophisticated methods employed by attackers, who can leverage seemingly legitimate booking data to craft convincing phishing attempts.

We noticed suspicious activity involving unauthorized third parties accessing the booking information of some of our customers.

โ€” Courtney CampThe Booking.com spokesperson confirmed the incident to TechCrunch, detailing the company's initial detection of the suspicious activity.

In response, Booking.com has taken immediate action, including limiting the breach and notifying affected customers. The company has also reset PINs for relevant bookings. To further protect users, Booking.com advises caution regarding external links, especially those received via WhatsApp or SMS, and recommends verifying any requests for card details directly with the accommodation through official channels or the Booking.com app.

Once we identified the incident, we took steps to contain it. We have notified our customers and changed the PINs of the relevant bookings.

โ€” Courtney KimThe Booking.com spokesperson explained the immediate actions taken by the company to address the security breach.
DistantNews Editorial

Originally published by Ta Nea in Greek. Translated, summarized, and contextualized by our editorial team with added local perspective. Read our editorial standards.