Booking.com Suffers Data Breach, Warns Customers of Exposed Information

Accommodation booking platform says financial data was not accessed in the incident.

Apr. 13, 2026 at 11:57am

A highly detailed, 3D rendered illustration of a glowing server rack with pulsing neon blue and magenta lights, conveying the complex digital systems that power a major online travel booking platform.A digital infrastructure visualization conceptually representing the cybersecurity challenges facing major online travel booking platforms.Norwalk Today

Booking.com, the global accommodation booking platform, has suffered a data breach where unauthorized parties gained access to some customers' booking information. The company has notified affected customers and taken steps to secure the impacted reservations, though it did not disclose the number of people affected. Booking.com says financial data was not accessed in the breach.

Why it matters

Data breaches at major travel booking platforms like Booking.com can erode consumer trust and raise concerns about the security of personal information shared when making reservations. This incident also highlights the ongoing challenges the industry faces in combating online fraud and scams targeting both customers and hotel partners.

The details

Booking.com said it 'noticed some suspicious activity involving unauthorised third parties being able to access some of our guests' booking information' and took action to contain the issue. The company updated the PIN numbers for the affected reservations and notified impacted customers. The accessed information could include booking details, names, emails, addresses, phone numbers, and any other details shared with the accommodation provider.

  • Booking.com discovered the breach and took action in April 2026.

The players

Booking.com

A global accommodation booking platform that lists over 30 million properties worldwide and connects millions of travelers with experiences, transport, and places to stay.

Booking Holdings

The $137 billion US company that owns Booking.com, as well as other travel brands like OpenTable, Agoda, and Kayak. Booking Holdings is headquartered in Norwalk, Connecticut and employs over 24,000 people globally.

Got photos? Submit your photos here. ›

What’s next

Booking.com has reported the breach to the Dutch privacy regulator and will likely face further scrutiny and potential fines for the incident.

The takeaway

This data breach at Booking.com underscores the ongoing cybersecurity challenges facing the travel industry, as platforms work to protect customer information while also combating the rise of online fraud and scams targeting both consumers and hospitality partners.