Booking.com Discloses Data Breach Exposing Customer Booking Details

Fez– Booking.com said it detected suspicious activity linked to unauthorized parties accessing parts of its reservation systems, prompting an internal response to contain the breach and secure affected accounts.

According to The Guardian, the company moved to reset PIN codes associated with impacted bookings and notified customers, stating that immediate steps were taken once the issue was identified. It did not disclose the number of users affected.

The breach did not compromise financial data. However, the exposed information may include booking details and personal identifiers such as names, email addresses, phone numbers, and physical addresses, along with any additional information shared with accommodation providers at the time of booking.

The incident adds to mounting concerns around cybersecurity risks in the online travel sector, where platforms increasingly face sophisticated fraud schemes. 

Booking.com has been dealing with a rise in scams in which attackers impersonate hotels or listings to obtain payment details from users under the pretext of verification or pre-authorization.

The breach also echoes past vulnerabilities. In 2018, attackers used phishing techniques to access hotel partner accounts, exposing data linked to thousands of customers. That incident later resulted in regulatory penalties after reporting delays.

Owned by Booking Holdings, Booking.com is one of the largest digital travel marketplaces globally, offering access to more than 30 million accommodation listings and serving millions of users across transport, lodging, and travel experiences.

The broader industry is facing increasing scrutiny over platform security, including the spread of fraudulent listings and the protection of user data. 

Regulators and consumer advocates have called for tighter safeguards as cyber threats continue to evolve.