Booking.com Data Breach Exposes Customer Reservation Details

Severity: Medium (Score: 51.8)

Sources: Theregister, Databreaches, Theaustralian.Au, Theguardian, www.abc.net.au

Summary

Booking.com has reported a data breach affecting customer reservation details, with unauthorized parties potentially accessing names, email addresses, phone numbers, and booking information. The company detected suspicious activity and has since reset booking PINs for affected users while advising them to be vigilant against phishing attempts. Although financial data was not compromised, the breach raises concerns about follow-on phishing scams using real booking data. Booking.com has not disclosed the number of affected customers or the method of the breach. This incident follows a history of cyberattacks on the platform, including a significant breach in 2021 that resulted in a fine from Dutch regulators. The company has emphasized its commitment to enhancing security measures in response to this incident. Key Points: • Unauthorized parties accessed customer reservation details on Booking.com. • Financial information was not compromised, but personal data was exposed. • Booking.com has a history of data breaches, raising concerns about ongoing security.

Key Entities

• Data Breach (attack_type)
• Phishing (attack_type)
• Supply Chain Attack (attack_type)
• United Arab Emirates (country)
• Booking.com (company)
• T1566 - Phishing (mitre_attack)
• WhatsApp (platform)