Breaches and incidentsBriefReported by a reputable outlet, citing the company
Booking.com: guest reservation data accessed, reservation PINs reset
Booking.com said it “recently noticed some suspicious activity” in which unauthorized third parties could access some guests’ booking information.
- Disclosed
What happened
- Booking.com said it “recently noticed some suspicious activity” in which unauthorized third parties could access some guests’ booking information: names, email and postal addresses, phone numbers and messages shared with properties. It says payment data was not accessed. Count not disclosed.
- Root cause: not disclosed. Malwarebytes assesses that hotel partner accounts were the likely route (researcher view, not a company finding).
- No attacker named.
- Contained; affected guests notified individually; PINs reset for existing and past reservations.
Sources
- https://bleepingcomputer.com/news/security/new-bookingcom-data-breach-forces-reservation-pin-resets
- https://www.malwarebytes.com/blog/data-breaches/2026/04/booking-com-breach-gives-scammers-what-they-need-to-target-guests
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.