Shattered BCD Travel Data Breach Exposes 700,000 Records Amid Investigation
Article Content
- •BCD Travel confirmed a data breach affecting traveler records due to a third-party vulnerability.
- •ShinyHunters claims responsibility for the breach, with reports of over 700,000 records potentially exposed.
- •Edelson Lechtzin LLP is investigating class action claims for affected individuals.
BCD Travel Services B.V. reported a data breach stemming from a third-party vulnerability affecting personal information of travelers. The breach, linked to the hacking group ShinyHunters, has led to claims of over 700,000 records being compromised, though BCD has not confirmed this number. The company activated its cybersecurity incident response team and took the affected application offline, while also notifying law enforcement. So far, BCD has not found evidence of misuse of the exposed data. The compromised data may include names, contact details, and travel-related information, raising concerns about identity theft and fraud. Edelson Lechtzin LLP is investigating potential class action claims on behalf of affected individuals. BCD is offering one year of complimentary credit monitoring to those impacted. The breach occurred between May 22 and May 26, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track shinyhunters and Salesforce in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who is affected by the breach?
What information was exposed?
What should affected individuals do?
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's… 
Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…