Data Breach Sparks New Scam Wave
Booking.com was involved in a security breach that revealed customer data and prompted an increase in fraud online. Cybercriminals accessed booking details and used them to launch targeted scams.
It confirmed that hackers gained access to name, email address, phone number, and information related to bookings. The company said payment information was not compromised.
Hackers now use this data to pretend to be hotel staff or other support personnel to contact travellers.
The Reservation Scam: How it Works
Reservation scams are the latest fraud wave, according to security experts.
They contact travelers by providing accurate information about their trip. The criminals use real hotel names, dates of travel, and booking reference. The message appears more genuine.
Then they claim that there was a problem and demand an extra payment.
The information is accurate, and many victims will believe it.
How hackers exploit the system
Hotel bookings can be accessed by fraudsters without the need for them to hack into customer accounts.
They contact travellers directly using stolen data. The scams are now more difficult to detect and faster.
According to security experts, the combination of booking information and contact details increases trust. Criminals are reliant on that trust.
Companies and safety advice
Booking.com has said that it is taking steps to reduce the risk and secure reservations. Users are also notified via email.
It stresses that the company never requests customers to send their card information via email, text messaging, or telephone calls. The company warns customers not to use bank transfers for bookings that are outside of official instructions.
It is important that customers treat any unexpected payments with caution.
The Scam is Growing
Travel industry experts say that cybercrime is a growing problem in the industry due to its global reach.
The booking platforms are valuable data sources because they process thousands of reservations.
As soon as an attacker gains access to the system, he can launch highly convincing phishing attacks.
Researchers warn of the increasing organization and sophistication of these attacks.
