Booking.com has informed certain customers that hackers may have gained access to information linked to their travel bookings.
According to notifications shared by users, the online travel service based in Amsterdam indicated that an unauthorized third party might have accessed data such as names, email addresses, phone numbers, and other details provided by users to accommodations.
In a communication with cybersecurity experts, Booking.com clarified that customer accounts have not been compromised.
The company reported detecting some “suspicious activity involving unauthorized third parties being able to access some of our guests’ booking information.” This incident highlights the importance of understanding data breaches and their implications.
However, the details surrounding the incident remain vague, and it is not clear whether the company's systems were breached or if the attackers obtained the data through alternative methods.
It is also uncertain how many users might be impacted by this cybersecurity event.
“We took quick action and the issue has been fully contained,” stated a Booking.com representative via email. “We have updated the PIN number for these reservations and informed our customers accordingly.”
“While no financial or payment information was accessed, we’re also reminding customers to remain vigilant against potential phishing attempts and emphasizing that Booking.com will never request credit card information via email, phone, WhatsApp, or text message, nor ask them to make a bank transfer that differs from the payment details in their booking confirmation,” the representative added. For more on the company's history and operations, visit Booking.com - Wikipedia.
In light of this incident, it is crucial for users to be aware of the tactics employed by cybercriminals. The CISA advisory provides insights into observed tactics, techniques, and procedures used by state-sponsored actors.
