Booking.com Confirms Data Breach, Customer Booking Details Exposed!

When you book a stay online, you expect convenience and definitely not any scare. As travel platforms grow, so do the risks tied to the data they handle. The latest update from Booking.com is a reminder of how quickly that trust can be tested.

 

TL;DR

 

• Booking.com confirms hackers accessed customer booking and personal data.
• Phishing attempts using stolen booking details have already been reported by users.
• The company says financial information was not accessed and has reset affected reservation PINs.

Booking.com confirmed Monday that hackers may have accessed customers’ personal data, including names, email addresses, phone numbers, and booking details. The global travel and hotel reservation giant notified customers this past week of the breach, according to several online posts.

“We’re writing to inform you that unauthorized third parties may have been able to access certain booking information associated with your reservation,” the notification to customers, according to one user’s post on Reddit. Several other Reddit users replying to the post said they received the same notification. The message from the company included the aforementioned types of compromised data, as well as “anything that you may have shared with the accommodation.”

One user who shared the notification said they received a phishing message via WhatsApp two weeks earlier, which included “booking details and personal information.” This suggests that the attackers may already be using the stolen data to target customers more effectively.

A spokesperson for Booking.com, Courtney Camp, said that “noticed some suspicious activity involving unauthorized third parties being able to access some of our guests’ booking information. Upon discovering the activity, we took action to contain the issue. We have updated the PIN number for these reservations and informed our guests.”

 
The company did not disclose how many customers were affected or provide further technical details about the breach. In a separate statement to The Guardian, Booking.com said that “financial information was not accessed.”

This isn’t the first time the platform has faced security concerns. In 2024, hackers had compromised hotel systems using spyware, in some cases capturing sensitive booking data through infected devices.

With over 6.8 billion bookings made through the platform since 2010, the scale of Booking.com’s operations makes incidents like this particularly significant. For users, it’s another reminder to stay cautious, especially when unexpected messages reference personal travel details.