If you’ve booked a holiday recently, you might want to double-check your inbox—and your bank statements.
In a worrying development for travellers everywhere, global accommodation giant Booking.com has confirmed that hackers have breached its systems, gaining access to customers’ personal data.
While the company has been tight-lipped about the scale of the breach, it’s clear that this incident could have far-reaching consequences for anyone who’s used the platform.
What Happened?
Booking.com, one of the world’s largest travel and hotel reservation websites, announced on Monday that it had detected ‘suspicious activity’ affecting a number of reservations. The company moved quickly to contain the issue, but not before unauthorised third parties managed to access sensitive booking information.
So, what exactly was exposed? According to notifications sent to affected customers (and shared widely on social media), hackers may have accessed names, email addresses, phone numbers, and specific booking details.
Even more concerning, the company warned that the attackers could see ‘anything that you may have shared with the accommodation’—which could include special requests, travel plans, or even passport details.
Thankfully, Booking.com has stated that no financial information was accessed. Still, the personal data that was stolen is more than enough for scammers to launch targeted phishing attacks.
How Are Hackers Using the Stolen Data?
It didn’t take long for the stolen information to be put to use. One user reported receiving a highly convincing phishing message via WhatsApp, which included accurate personal and booking details.
This kind of targeted scam is particularly dangerous, as it can easily trick even the most cautious traveller into handing over money or more sensitive information.
Phishing attacks like these often involve urgent requests for payment or changes to your booking, and they can look very convincing—especially when they include details only Booking.com or your hotel should know.
What Has Booking.com Done About It?
Upon discovering the breach, Booking.com says it immediately took steps to contain the issue. The company has updated the PIN numbers for affected reservations and has been contacting guests directly to inform them of the situation. If you were affected, you should have received an official notification from Booking.com in your email inbox.
This isn’t the first time Booking.com has faced a security incident. Back in 2018, a phishing attack compromised the data of over 4,000 customers after hackers stole login credentials from hotel employees in the UAE. That incident led to a hefty fine from Dutch authorities for failing to report the breach within the required 72-hour window.
What Should You Do If You’ve Booked Through Booking.com?
If you’ve made a recent booking, here are some steps you can take to protect yourself:
1. Check Your Email:
Look for any official communication from Booking.com regarding the breach. If you haven’t received anything, it’s still wise to be extra vigilant.
2. Be Wary of Payment Requests:
Only make payments through Booking.com’s official website or app. If you receive an email, text, or WhatsApp message asking for payment or personal information—even if it looks legitimate—do not respond or click any links.
3. Update Your Passwords:
If you use the same password for Booking.com and other sites, change it immediately. Consider using a password manager to keep your accounts secure.
4. Monitor Your Accounts:
Keep an eye on your bank statements and credit card activity for any suspicious transactions.
5. Report Suspicious Messages:
If you receive a dodgy email or message, report it to Booking.com’s customer service straight away.
Why Are Travel Sites a Target for Hackers?
Travel websites like Booking.com are a goldmine for cybercriminals. Not only do they hold personal and contact information, but they also store details about travel plans, payment methods, and even passport numbers. This makes them a prime target for hackers looking to steal identities or trick people into handing over money.
For older Australians, who may be less familiar with the latest online scams, these attacks can be especially devastating. That’s why it’s so important to stay informed and take steps to protect yourself online.
Key Takeaways
- Booking.com has confirmed a data breach, with hackers accessing customers’ personal booking information, including names, emails, phone numbers, and details shared with accommodations, but no financial information was accessed.
- The company responded by updating PIN numbers for affected bookings and notifying impacted users directly to improve security.
- There are reports that stolen data is already being used in targeted phishing scams, such as messages on WhatsApp referencing real booking details.
- Customers are advised to be cautious of any urgent payment requests from supposed hoteliers, only pay via official Booking.com portals, and report suspicious messages to the platform immediately.
We know that many of our members love to travel and use online booking platforms to snag the best deals. Have you received any suspicious messages after booking a trip? Have you ever fallen victim to a travel scam? Share your experiences in the comments below—your story could help others avoid falling into the same trap!
And remember, if you’re ever unsure about a message or request, it’s always better to double-check than to risk your hard-earned money or personal information.
Stay safe, and happy travels!
