Security
Travel portal Booking.com has confirmed a security breach that may have exposed personal information of customers, including names, email addresses, phone numbers, and booking details.
The company said unauthorized third parties gained access to certain reservation-related data and has since taken steps to contain the incident. Affected users were notified, with Booking.com updating PINs associated with impacted bookings as a precaution.
According to user reports shared online, some customers had already received phishing messages containing their booking information, suggesting that attackers may be using the compromised data to target victims through channels such as WhatsApp.
A company spokesperson said Booking.com detected suspicious activity involving unauthorized access and acted quickly to limit its impact. The firm also clarified that financial information was not compromised in the breach.
The incident highlights growing risks in the travel and hospitality sector, where attackers increasingly exploit booking data to launch targeted scams. Past security issues in the ecosystem have included malware infections on hotel systems, which can expose sensitive administrative and customer data.
The breach underscores the importance of securing third-party systems and user data, particularly as travel platforms handle large volumes of personal information that can be leveraged for social engineering attacks.
The company said unauthorized third parties gained access to certain reservation-related data and has since taken steps to contain the incident. Affected users were notified, with Booking.com updating PINs associated with impacted bookings as a precaution.
According to user reports shared online, some customers had already received phishing messages containing their booking information, suggesting that attackers may be using the compromised data to target victims through channels such as WhatsApp.
A company spokesperson said Booking.com detected suspicious activity involving unauthorized access and acted quickly to limit its impact. The firm also clarified that financial information was not compromised in the breach.
The incident highlights growing risks in the travel and hospitality sector, where attackers increasingly exploit booking data to launch targeted scams. Past security issues in the ecosystem have included malware infections on hotel systems, which can expose sensitive administrative and customer data.
The breach underscores the importance of securing third-party systems and user data, particularly as travel platforms handle large volumes of personal information that can be leveraged for social engineering attacks.
See What’s Next in Tech With the Fast Forward Newsletter
Tweets From @varindiamag
Nothing to see here - yet
When they Tweet, their Tweets will show up here.
