Booking.com Confirms Reservation Data Breach and Resets PINs
Summary
Booking.com confirmed unauthorized access to some reservation records, potentially exposing guest contact details and property communications. It reset reservation PINs and notified users; the number affected is unknown, and reported scams are not confirmed as related.
Key points
- Booking.com confirmed that unauthorized third parties accessed information associated with some reservations.
- Potentially exposed information includes guests’ names, email and postal addresses, phone numbers, and communications with property providers.
- The company reset PINs for affected existing and past reservations and emailed guests updated PINs.
- The number of impacted users is unknown; Booking.com said it would notify affected guests individually.
- Users reported receiving no in-app alert alongside the notification emails, creating uncertainty about their legitimacy.
- Booking.com urged guests to be cautious of suspicious emails and calls. Reports of scammers appearing to know reservation details were not confirmed as related to this incident.
Article Details
- Victim Organization
- Booking.com
- Victim Domain
- booking.com
- Incident Type
- Unauthorized access to reservation information / data breach
- Data Types Exposed
- Full names
- Email addresses
- Postal addresses
- Phone numbers
- Communications with property providers
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Booking.com said it contained the issue, reset PINs for affected reservations, and notified impacted guests by email. The number of affected users was not disclosed.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed