Back skift.com

Expedia Confirms Cyberattack Through Third Party Vendor

skift.com • November 14, 2026

Expedia says attackers reached its systems through a compromised technology provider. The company has not disclosed the extent of any data exposure.

Expedia Group confirmed Thursday that attackers reached its systems through a compromised third-party data platform provider, in a supply chain cyberattack that also affected multiple companies.

Acknowledgment came after several cybersecurity sites reported this week on allegations by an extortion group known as n0n that it had stolen Expedia data.

In a statement to Skift, Expedia Group said:

"We are aware of a supply chain attack, reported by security researchers, in which attackers compromised a third-party data platform provider and used

Get unlimited access with Skift Pro.

Unlock your read

Enter your email for a complimentary article + exclusive offers.

Tags: cybersecurity , expedia , online travel , the daily

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Expedia Data Breach: Nearly One Billion Traveler Records Compromised A newly formed Russian extortion group named n0n claims to have stolen nearly one billion records from Expedia, exploiting a compromised third-party data platform in a supply chain attack. The breach reportedly includes over 830 million loyalty program records, 58 million traveler profiles, and 333 million consumer account records. Expedia confirmed the attack but has not disclosed the exact number of records affected, stating that it is still investigating the incident. The attackers have threatened to publish the data unless a settlement is reached. Security experts warn that the extensive data could be used for phishing attacks targeting travelers. The breach highlights vulnerabilities in third-party vendor security, as the attackers gained access through a trusted vendor key. Expedia has assured that its platforms remain safe for users. The situation is ongoing, with further updates expected as the investigation continues. 3 sources 67

Extracted Entities

Expedia Confirms Cyberattack Through Third Party Vendor

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)