Booking.com fraud

[Longsidebovril]

Just a quick note to say if anyone has an email from them this morning saying their booking may be cancelled it’s a fraud.
They’ve been hacked and it’s very sophisticated.
They had my full reservation dates and times… spoke to the hotel and they said it’s been going on all day.

[Vintage Claret]

I had this with booking.com last year regarding a reservation we'd made through them for a hotel near Dubrovnik!

Received an e-mail via booking.com purporting to be from the hotel claiming my payment card had been declined and booking would be cancelled if I didn't click on the embedded link with new card details.

They had my name, hotel name, and dates of stay but I was still suspicious as the URL didn't look right so I emailed the hotel direct to check and the hotel confirmed it wasn't from them and not to click any links.

I did inform booking.com at the time but received no response.

[Croydon Claret]

I had the same experience earlier this year. A little research showed that they have been compromised for a number of years.

Despite them being aware of this vulnerability they do nothing about it.

Safer to stop booking with them, there are plenty of other options

[Longsidebovril]

Good to know.
This was exactly it. They had all my details and sent simultaneous emails. One actually from Booking.com and the second from the fraudster. Luckily my bank flagged it and no harm done but it’s very convincing.

[Jel]

Is it that dodgy bloke from Bolton

[Goalposts]

Well under the law they have to notify the ICO WITHIN THE GOVt or face fines and potential penalties. And they get bigger the longer they go on depending on the data breach.

Latest list of reported data breaches is on their website currently
In the past few weeks, several major retailers and companies have reported being hit by cyberattacks and data breaches, including:
North Face and Cartier:
Both reported customer data stolen in cyberattacks, with North Face acknowledging a "small-scale" breach in April and Cartier saying an unauthorized party gained temporary access.
Adidas, Victoria's Secret, and Harrods:
These high-profile retailers also experienced cyberattacks.
M&S and Co-op:
These companies had their operations severely disrupted by cyberattacks in April, with M&S also reporting that customer data was stolen.
UK Armed Forces Payroll:
A recent cyberattack targeted armed forces payroll, prompting the Prime Minister to decline naming China as the perpetrator.
NHS:
Major hospitals in the UK have been hit by cyberattacks, potentially putting patient and staff data at risk.
Other Retailers:
Other retailers like Lee Enterprises, Coinbase, and fashion brand Dior have also reported data breaches or cyberattacks.
Other Companies:
A variety of other companies have also been impacted, including:
Texas Dept.
Sensata Technologies
AT&T
Media giant Lee Enterprises
Coibase
UK Legal Aid Agency
Nova Scotia Power
Australian Human Rights Commission
Ascension
Insight Partners

[dougcollins]

Is it that dodgy bloke from Bolton

Vernon?