Booking.com has confirmed a data breach in which unauthorised parties gained access to customers’ booking information. The Amsterdam-based accommodation platform said it noticed suspicious activity and took steps to contain the issue, including updating pin numbers for affected reservations and informing guests.
The company declined to disclose how many customers were impacted but stated that financial information was not accessed. An email to affected customers indicated that hackers may have obtained names, email addresses, phone numbers, and other details associated with previous reservations, as well as any information shared with the accommodation.
This breach is the latest in a series of cybercrime attempts targeting Booking.com. The platform has recently grappled with scams where fraudsters request payment details to pre-authorise or verify trips, then charge large sums. In 2018, criminals used phishing to steal login credentials from hotel employees in the United Arab Emirates, accessing data of over 4,000 people.
Booking.com reported the 2018 breach to the Dutch privacy regulator 22 days late, resulting in a €475,000 fine. The wider online booking industry faces increasing pressure to tackle fake listings and improve security.
