Data breach at Booking.com: customer information exposed

Booking.com has officially confirmed a data breach affecting user information. The incident involves booking-related data, including customer names, email addresses, and travel details.

The company notified users that unauthorized third parties had gained access to certain booking information. According to reports from affected users, multiple individuals received similar notifications, suggesting the issue may be systemic rather than isolated.

What data may have been compromised

Available information indicates that attackers could have accessed not only basic user data but also any details shared with accommodation providers, such as special requests or additional contact information.

One user who made the notification public reported receiving a suspicious WhatsApp message shortly after the incident, containing references to their booking and personal details. This suggests that the stolen data may already be used in phishing attempts and targeted scams.

Company response and security measures

A spokesperson for Booking.com, Courtney Kemp, confirmed that the company detected suspicious activity involving unauthorized access to guest booking data. Following the discovery, measures were taken to contain the issue, and PIN codes for affected bookings were reset.

However, the company has not disclosed the scale of the breach, including the number of affected users. At the same time, Booking.com emphasized that financial information was not compromised.

Context and previous incidents

Such incidents are not uncommon in the online travel industry. In previous cases, attackers infected hotel systems with malware to gain access to administrative panels. In some instances, spyware tools were used to capture sensitive information directly from staff screens.

Considering that more than 6.8 billion bookings have been made via Booking.com since 2010, this breach once again raises concerns about data security and the need for stronger protection mechanisms.