Booking.com Data Breach Allows Limited Access to Guest Booking Details
Booking.com reported a data breach that allowed unauthorized third parties to access some guests' booking information. The company updated PIN numbers for affected reservations and notified impacted customers. Financial details were not compromised in the incident.
Newsweekcom experienced a data breach that permitted unauthorized third parties to access some guests' booking information. com spokesperson. com updated the PIN number for the affected reservations and informed the affected guests about the breach.
com stated that hackers accessed certain booking information associated with a previous reservation made by affected customers. The accessed information could include booking details, names, emails, addresses, phone numbers associated with the booking, and anything shared with the accommodation. Financial information was not accessed in the latest data breach, the spokesperson said.
Company Background and Operations Booking.
com was founded in 1996 in Amsterdam, the Netherlands. The platform connects millions of travelers to over 28 million accommodation listings worldwide. 6 million homes, apartments, and other places to stay.
Prior Incidents at Booking.
com In 2018, fraudsters used phishing tactics to obtain login details from hotel employees in the United Arab Emirates. com. com reported the 2018 breach to the Dutch privacy regulator 22 days late and was fined €475,000 (around $559,700) for the late reporting.
com customers for payment information to verify or preauthorize trips and later charged them high amounts of money.
Broader Industry Context Three major data breaches from 2014 and 2020 affected more than 344 million customers worldwide at Marriott International and its subsidiary Starwood Hotels & Resorts.
The Federal Trade Commission required Marriott International and Starwood Hotels & Resorts to settle charges that their failure to implement reasonable data security led to the 2014 and 2020 breaches.
Story Timeline
5 events- Recently (2026)
Booking.com notices suspicious activity and unauthorized access to guest booking information
1 sourceBooking.com spokesperson - 2025
Scammers request payment information from Booking.com customers and charge high amounts
1 sourceunattributed - 2018
Phishing incident provides access to booking data of more than 4,000 customers; reported 22 days late, fined €475,000
1 sourceunattributed - 2014-2020
Three major data breaches affect more than 344 million customers at Marriott International and Starwood Hotels & Resorts
1 sourceunattributed - 1996
Booking.com founded in Amsterdam, the Netherlands
1 sourceunattributed
Potential Impact
- 01
No direct financial losses reported from this breach
- 02
Broader awareness of vulnerabilities in travel booking systems
- 03
Affected guests may face increased phishing risks from exposed personal details
- 04
Potential regulatory scrutiny on Booking.com's data security practices
- 05
Eroded trust among users, possibly reducing bookings on the platform
Transparency Panel
Related Stories
Washington ExaminerFederal Jury Convicts Defendant on Gun Charges in Delaware Trial
A federal jury in Wilmington, Delaware, found the defendant guilty on all three felony gun charges related to a 2018 firearm purchase. The charges involved lying about drug use on a background check form and possessing a gun while addicted to or using illegal drugs. Sentencing is…
indianexpress.comUnited States Imposes Blockade on Iran
The United States has initiated a blockade of Iran's ports, prompting condemnation from China and efforts toward peace talks. The conflict, involving the US and Israel against Iran, includes a recent ceasefire announcement and searches for a missing US airman after a plane shootd…
investing.comU.S. Treasury Notifies Two Chinese Banks of Potential Sanctions Over Iranian Transactions
The U.S. Treasury has sent letters to two Chinese banks regarding potential Iranian money flows. Treasury Secretary Scott Bessent stated that secondary sanctions could be imposed if such transactions are proven. The action aims to address financial channels linked to Iran.