Booking.com confirms user data breach, payment details untouched

Hackers accessed Booking[.]com user data, with the company saying unauthorized third parties may have been able to access certain booking information linked to reservations. The exposed details could include names, email addresses, phone numbers, and information shared with accommodations, though Booking[.]com said no payment data was accessed and the incident has been contained.

The breach notification sent to impacted users stated that “unauthorized third parties may have been able to access certain booking information associated with your reservation,” and that suspicious activity affecting a number of reservations was contained. Booking[.]com has not disclosed how many users were affected, but it said it has reset reservation PINs and advised customers to stay alert for phishing attempts, noting that it never asks for card details or unusual transfers via email, phone, WhatsApp, or SMS. It remains unclear how the attackers breached the systems.