Booking.com Reportedly Resets Reservation PINs After Data Breach
Summary
The article reports that Booking.com reset affected customers’ reservation PINs after a breach allegedly exposed profile and itinerary data. It also describes reported phone scams and phishing; the technical cause, scope and independent confirmation are not provided.
Key points
- The article reports that Booking.com discovered a breach internally and reset reservation PINs for affected customers.
- Reportedly exposed information included names, email addresses, home addresses, phone numbers and identity or reservation details.
- The article says users reported callers impersonating Booking.com or hotel staff and using itinerary details to direct victims to phishing sites seeking financial credentials.
- The article says Booking.com planned to notify affected users and provide 24-hour multilingual support.
- The technical cause and number of affected users are not disclosed, and the article provides no independent confirmation of the breach.
Article Details
- Victim Organization
- Booking.com
- Incident Type
- Data breach involving user profiles and reservation details, followed by reported phone scams and phishing attempts
- Data Types Exposed
- Full legal names
- Email addresses
- Residential addresses
- Phone numbers
- Identity and registration details shared with lodging providers
- Reservation and itinerary details
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Booking.com implemented a mandatory reset of reservation PINs for affected users and said it would provide 24-hour multilingual support. Users were reportedly targeted with phone scams and phishing that used stolen personal and itinerary details.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed