Booking.com, a popular travel booking platform, has announced that hackers potentially gained access to customers’ personal data, such as names, email addresses, phone numbers, and reservation specifics, in a security breach recently disclosed by the company.
The disclosure, made earlier this week, indicated that unauthorized third parties might have obtained information linked to past and upcoming bookings. In a communication to impacted users, Booking.com revealed the detection of “suspicious activity” impacting several reservations and outlined the steps taken to address the breach.
Reportedly, the compromised data included reservation details, contact information related to bookings, and any information shared with the accommodation providers. However, the company assured that customers’ financial details remained secure as they were not accessed by the hackers. As a precautionary measure, Booking.com reset the PIN numbers associated with the affected reservations.
This revelation via a widespread email notification came after various media outlets, including The Guardian and TechCrunch, reported on the security breach. The incident adds to a history of security concerns within hotel systems associated with Booking.com. In a previous incident in 2024, TechCrunch detailed how hackers infiltrated hotel computers with stalkerware, capturing the screens of victims logged into the Booking.com administration portal.
Booking.com has refrained from disclosing the exact number of customers impacted by this recent security breach.