Expedia Data Breach: Nearly One Billion Traveler Records Compromised

• •n0n claims to have stolen nearly one billion records from Expedia through a third-party vendor.
• •The breach includes sensitive data such as loyalty program records and consumer account details.
• •Expedia confirmed the attack but has not disclosed the full extent of the data compromised.

A newly formed Russian extortion group named n0n claims to have stolen nearly one billion records from Expedia, exploiting a compromised third-party data platform in a supply chain attack. The breach reportedly includes over 830 million loyalty program records, 58 million traveler profiles, and 333 million consumer account records. Expedia confirmed the attack but has not disclosed the exact number of records affected, stating that it is still investigating the incident. The attackers have threatened to publish the data unless a settlement is reached. Security experts warn that the extensive data could be used for phishing attacks targeting travelers. The breach highlights vulnerabilities in third-party vendor security, as the attackers gained access through a trusted vendor key. Expedia has assured that its platforms remain safe for users. The situation is ongoing, with further updates expected as the investigation continues.