[CLSTR]
< Back to situations

We’ll email you as it develops, and you can follow the whole thread from day one.

[SITUATION] · [ACTIVE]

11 clusters · 39 sources · 50 days · First seen · Last updated

Categories: TECHNOLOGY · CRIME · BUSINESS

Hotel reservation data breaches and scams

Entities: Booking.com · Predrag Vuckovic

Overview

The wave of fraud that began with the June breach of Croatia’s Phobs platform has continued to spread across Europe. In early July, Polish authorities reported that a compromised reservation‑management service used by many hotels leaked guest details. Scammers sent e‑mail and SMS messages that mimicked official hotel notices, claiming payment problems and demanding immediate transfers to preserve bookings. Victims were urged to verify any payment request directly with the hotel and to involve their banks. At the same time, Booking.com disclosed that an April intrusion had exposed personal data for a subset of its customers. The breach was reported to the Dutch regulator weeks after discovery, exposing the company to a possible €475,000 fine. Criminal groups are now leveraging the stolen information to craft highly personalized phishing messages that reference specific hotels, dates and amounts, pressuring travellers to click fraudulent links during the peak holiday season. Booking.com responded by resetting reservation PINs and notifying affected users, while security experts again stressed the importance of confirming bookings through official channels and reporting any suspicious activity. A fresh cyber‑attack on 6 July targeted an external reservation‑management service used by Polish hotels, repeating the same pattern of fraudulent e‑mail and SMS demands for immediate payments. Authorities reiterated that travellers should not click links, should verify reservations directly with hotels, and should involve banks when suspicious transfers occur. By 19 July a new phishing campaign impersonating Booking.com began offering a bogus €435 “cashback” to users of the Genius loyalty programme. In July 2026 further Booking.com‑related scams were reported. Fraudsters who had accessed the platform’s extranet credentials began sending WhatsApp and e‑mail messages that appeared to come from the booked hotel, asking recipients to correct a payment via a fake link.

Timeline

  1. 3 days ago

    [TECHNOLOGY] 3 sources
    Booking.com phishing scams exploit real reservation data

    Criminals accessing Booking.com hotel accounts use real reservation details to send fake payment requests via WhatsApp, leading travelers to counterfeit sites that steal credit‑card data. Experts urge users to‑

  2. 6 days ago

    [CRIME] 3 sources
    Booking.com data breach fuels targeted hotel reservation phishing scams

    A Booking.com breach via hotel partners' systems leaked reservation details, enabling sophisticated phishing emails that have already cost victims thousands, prompting security warnings and fraud‑avoidance tips

  3. 6 days ago

    [CRIME] 6 sources
    WhatsApp Scam Impersonating Booking.com Targets Vacationers in Germany

    A WhatsApp phishing scheme pretends to be Booking.com, sending German travelers a fake link that harvests personal and credit‑card data.

  4. 9 days ago

    [BUSINESS] 2 sources
    Booking.com expands Genius loyalty program amid phishing scams

    Booking.com’s Genius loyalty program offers tiered discounts and perks, while a new phishing scam pretends to give a €435 cashback, luring users to fake login sites.

  5. 21 days ago

    [CRIME] 2 sources
    Booking.com data breach fuels travel‑fraud scams during peak season

    Booking.com’s April data breach exposed traveler details; criminals are using the information for precise fraud scams during peak travel season, prompting the company to reset PINs and advise security steps.

  6. 22 days ago

    [CRIME] 5 sources
    Polish hotels targeted by cyber‑fraud scheme exploiting reservation data

    A breach of a hotel reservation system in Poland enabled scammers to send fake payment requests, prompting warnings to verify bookings and avoid clicking links.

  7. about 1 month ago

    [CRIME] 5 sources
    Booking.com users targeted by fraudulent payment alerts

    Scammers impersonating Booking.com hotels send urgent fake payment alerts, prompting travelers to reveal card details; verify bookings directly and contact banks if compromised.

  8. about 1 month ago

    [TECHNOLOGY] 2 sources
    Booking.com data breach sparks travel scams via WhatsApp

    Booking.com disclosed a data breach that exposed customer details; scammers are using the leaked information on WhatsApp to run fake cancellation scams, prompting warnings from the company and authorities.

  9. about 2 months ago

    [CRIME] 2 sources
    Hotel and Booking Platform Data Hack Triggers Global Fraud Alerts

    Hackers breached hotel and booking platforms, stealing guest data and using it in WhatsApp fraud scams; consumer groups warn against clicking payment links and urge direct verification.

  10. about 2 months ago

    [TECHNOLOGY] 2 sources
    Croatian hotel reservation hack exposes data of 100,000 guests

    A hack on a Croatian hotel reservation app stole data of over 100,000 guests, led to extortion attempts via WhatsApp, and is linked to a Serbian hacking group; AZOP is investigating.

  11. about 2 months ago

    [CRIME] 7 sources
    Croatian hotel reservation platform Phobs data breach affects ~100,000 tourists

    Phobs breach exposes personal data of ~100,000 Croatian hotel guests; scammers send fake WhatsApp messages to steal payment info. Hotels and data authority warn travelers.

Sources

072info.com · amica.de · ap-verlag.de · barilocheinforma.gob.ar · beaumonde.nl · bieb.knab.nl · biznis.kurir.rs · cineplex.com.br · criptotendencia.com · dalmacijanews.hr · dalmatinskiportal.hr · derwesten.de · es.fxmag.com · excelsior.com.mx · futurezone.de · hrturizam.hr · internautes.com · it-boltwise.de · itv-coburg.de · kleinezeitung.at · moncloa.com · mzee.com · noordernieuws.be · noticiasdemalaga.es · notiulti.com · nsuzivo.rs · p-magazine.be · poslovni.hr · presse-nachrichten.de · primeraplanany.com · recenzjeksiazek.natemat.pl · suedtirolnews.it · supernowosci24.pl · techbook.de · tko.pl · top-news.at · watchlist-internet.at · waz.de · zagreb.info