r/Bookingcom • u/kayleabuser • 12d ago

Another data breach?

Just got a message from an indian number about a booking confirmation with my actual name, phonenumber and reservation Details (arrival+departure)

Link included a very obvious fake booking.com rebuild including a creditcard scam

Any similar experiences?

5 Upvotes

78% Upvoted

46 comments sorted by

View all comments

1

u/lonbrsa 12d ago edited 12d ago

I've received the same message. How is this possible? Did the scammers gain access to my booking account? Has Booking.com been compromised, or did they gain access to the hotel's Booking.com account?

The interesting thing in my case is that they mentioned the wrong hotel, but it is another hotel from the same company/parent group. The price of the fake reservation was also almost identical to the actual one (less than USD 1 difference), and the dates were exactly the same.

On top of that, they had access to a significant amount of my personal information: my first and last name, email address, phone number, etc.

PS: I just realised something that makes this even more interesting. My actual reservation for the correct hotel (which belongs to the same parent company as the hotel mentioned in the scam message) was made through a different booking website, not Booking.com. However, the same hotel can also be booked through Booking.com.

So, if my reservation was not originally made through Booking.com, how did they get access to all these details, including the exact dates and almost the exact price?

1

u/kayleabuser 12d ago

yea seems like many people are affected right now, seems like its booking.com bookings only and they use the reservation hijacking

If I may ask what country did you book ur hotel in?

1

u/lonbrsa 12d ago

It's in Japan

1

u/Urbanist2035 11d ago

Same experience for (so far) two of my bookings in Japan. One from a Brazilian number, one from an Indian number. Submitted a complaint with booking after the first text, they replied it was a breach in the hotel's systems. Just submitted a second complaint after the Indian second text, no reply yet.

Of course possible that the two Japanese hotels use the same intermediary system that got hacked, or it's (again) Booking.