Booking.com has announced that unauthorized individuals may have accessed customer data, including names, email addresses, physical addresses, phone numbers, and booking details. The global travel and hotel reservation platform alerted its users about this potential breach earlier this week.
The notification sent to customers stated, "We're writing to inform you that unauthorized third parties may have been able to access certain booking information associated with your reservation." Many users took to social media platforms to confirm they received similar notifications. The message outlined the types of compromised data, which also included any information shared with accommodations.
A user who shared their experience on social media mentioned receiving a phishing message via WhatsApp two weeks prior, containing booking details and personal information. This indicates that the hackers might be using the stolen data to further target Booking.com customers.
In response, Booking.com spokesperson Courtney Camp stated that the company detected suspicious activity related to unauthorized access to guest booking information. "Upon discovering the activity, we took action to contain the issue. We have updated the PIN number for these reservations and informed our guests," she explained.
However, the spokesperson did not disclose how many customers were impacted by this incident. The company assured that no financial information was accessed during the breach.
This incident follows a prior report from TechCrunch in 2024, which highlighted that several hotels had been compromised by consumer-grade spyware. In one alarming case, a victim logged into their Booking.com administration portal while malware captured screenshots of their activity.
Since its inception in 2010, Booking.com has facilitated bookings for over 6.8 billion customers, emphasizing its significant role in the travel industry. As the digital landscape evolves, maintaining robust security measures will be crucial for protecting user data and fostering trust in online platforms.