Finance.Biggo Nol Universe Faces Data Breach Affecting Hotel Booking Data
Article Content
- •Nol Universe experienced a data breach affecting customer and employee information.
- •Sensitive data from bookings made between February 15 and September 8, 2026, was leaked.
- •The company has implemented security measures and is cooperating with authorities.
On October 26, 2026, Nol Universe reported a data breach affecting personal information of customers who booked domestic accommodations through the former Interpark Tour. The breach, confirmed to have occurred on October 22, involved an external attacker exploiting a security vulnerability to access sensitive data, including member ID, phone number, email, and booking details. The affected records span bookings made between February 15 and September 8, 2026. Additionally, employee data was also compromised in a separate incident on October 19, revealing names, phone numbers, and encrypted passwords. Nol Universe has since blocked the access route used in the attack, patched the vulnerability, and requested support from the Korea Internet & Security Agency (KISA). The company has temporarily suspended lookups of affected bookings and urged customers to be cautious of phishing attempts. The full scope of the breach remains under investigation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Asiana Airlines in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What data was compromised?
What actions has Nol Universe taken?
How can customers protect themselves?
Continue Reading
.NET Vulnerability CVE-2026-111497 Requires Immediate Action On October 25, 2026, Microsoft released out-of-band security updates for.NET addressing CVE-2026-111497, a vulnerability in the Brotli decompression algorithm that allows unauthorized attackers to elevate privileges over a network. The flaw affects.NET versions 8, 9, 10, and 11, particularly in applications that…
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…