Cyberattack on Booking.com, personal data stolen and millions of customers' reservations at risk

2026-04-14 14:07:51Aktualitet SHKRUAR NGA REDAKSIA VOX
Illustrative photo

Popular travel site Booking.com suffered a cyberattack, in which hackers stole customer information, including booking details.

PcMag reported this on Sunday, April 12, 2026. Several users reported receiving emails from Booking.com warning them that "unauthorized third parties may have accessed certain booking information associated with your reservation."

"We have recently noticed suspicious activity affecting some reservations and have immediately taken action to control the problem," the site wrote.

"Based on our investigation to date, the information accessed may include:
1) booking details; 2) names; 3) emails; 4) addresses; 5) phone numbers associated with the booking; 6) any other information you may have shared with the accommodation."

Booking.com's countermeasures

Booking.com has now generated new PINs for customer reservations to prevent hackers from accessing them.

The company also clarified that no user addresses were compromised, suggesting instead that accommodation address information was leaked.

However, the incident risks exposing affected customers to potential phishing scams.

Several Reddit users have already reported receiving fraudulent messages on WhatsApp regarding their reservations.

However, it is unclear whether hackers have had the opportunity to exploit the vulnerability before.

The Australian Broadcasting Corporation reports that a Booking.com user received a call in December from someone claiming to be a Booking.com agent, but who was actually a scammer intent on stealing his credit card information.

When asked about the issue, Booking.com simply stated: "We are committed to the security and protection of our customers' data. We have recently noticed some suspicious activity involving unauthorized third parties who were able to access some of our customers' reservation information. After discovering the activity, we took action to control the issue. We updated the PIN code for these reservations and notified our customers.

The company did not specify how many users were affected or who might be responsible for the breach.

Meanwhile, some customers say they have received several emails regarding the breach, prompting them to contact Booking.com on social media to ask if the emails are legitimate./kapitali.al


Video