# Cybersecurity threats against travel booking platforms

> Developing situation record from CLSTR: https://clstr.news/situations/cybersecurity-threats-against-travel-booking-platforms
> Updated: 2026-10-29T04:53:15.000Z. Sources: 6. Developments: 2.

Travel and accommodation platforms are facing a rise in sophisticated phishing attacks and data breaches. Reports indicate that attackers are using stolen booking data to execute highly targeted scams. In some instances, fraudulent messages contain accurate personal details, such as names, phone numbers, and specific booking periods, to prompt users to confirm reservations via links designed to steal credit card information.

Multiple companies have confirmed data leaks involving sensitive user information. MyRealTrip reported a breach involving names, emails, phone numbers, dates of birth, and in some cases, passport details. Other platforms, including Nol Universe and the B2B platform Onda, have also experienced leaks of contact details and specific booking information like accommodation names and purchase amounts. 

Experts warn that the exposure of these specific details enables ‘spear phishing,’ where attackers impersonate service providers to request urgent re-payments or credit card updates. Similar incidents have been noted globally, affecting Booking.com and the Japanese reservation management system Demaraz.

## Timeline

### 2026-10-29: Travel platforms face data breaches and targeted phishing risks

Data breaches at travel platforms like MyRealTrip and Onda have exposed personal and booking details, fueling risks of sophisticated spear phishing attacks targeting travelers.

2 sources. https://clstr.news/cluster/travel-platforms-face-data-breaches-and-targeted-phishing-risks

### 2026-10-28: Booking.com users targeted by sophisticated phishing scams

Booking.com users are facing sophisticated phishing scams where fraudsters use accurate booking data to steal credit card information and encounter fraudulent property listings.

4 sources. https://clstr.news/cluster/bookingcom-users-targeted-by-sophisticated-phishing-scams

---
Cite as: Cybersecurity threats against travel booking platforms. CLSTR, https://clstr.news/situations/cybersecurity-threats-against-travel-booking-platforms
