Booking.com Says Unauthorized Third Party May Have Accessed Guest Reservation Data
Summary
Booking.com says an unauthorized third party may have accessed some guests’ reservation information. The company says accounts were not breached, the issue is contained and reservation PINs were updated; the access method and number affected remain unclear.
Key points
- Booking.com notified some customers that an unauthorized third party may have accessed names, contact details and information shared with accommodations.
- The company said customer accounts were not breached, but whether its systems were breached or the data was accessed another way remains unclear.
- Booking.com said it contained the issue and updated PINs for the affected reservations.
- The number of affected users is unknown; the company said no financial or payment information was accessed.
- Booking.com reminded customers to watch for phishing and said it would not ask for payment details or bank transfers through email, phone, WhatsApp or text.
Article Details
- Victim Organization
- Booking.com
- Incident Type
- Possible unauthorized access to guest booking information; whether Booking.com systems were breached or attackers obtained the data by other means remains unclear.
- Data Types Exposed
- Names
- Email addresses
- Phone numbers
- Details shared with accommodations
- Affected Records
- Unknown; the number of affected users has not been disclosed.
- Operational Impact
- Booking.com said the issue was fully contained, updated PIN numbers for affected reservations, and notified customers.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged