• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
  • Jobs
  • Career
    • Cyber Security Training
    • Work from Home
    • Cyber Security Analyst
    • Remote Work – Six Ways to Keep Your Data Safe When Working Remotely
  • Field Guide
  • Newsletter Signup
  • Deals
  • News
AskCyberSecurity.com

AskCyberSecurity.com

Cyber Security News & Information

  • Home
  • Data Privacy
    • Gamers
    • Government Cyber Security
      • Legislation
      • Standards
        • What are the risks of computer security?
        • Medical Cyber Security
    • Social Media
  • Security
    • Data Breaches
    • Scams
    • Malware
  • Software
    • Apps
    • Web Browsers
  • Glossary
    • Cyber Security Acronyms
  • About Ask Cyber Security
    • Authors
    • Contact Us
  • VPN
    • How Do I Know If My VPN is Working?
    • Best Free VPN iPhone
    • Why Use a VPN?
    • NordVPN vs IPVanish
    • Private Internet Access Download
    • Best VPN for Streaming
      • TikTok VPN
    • VPN Porn
    • Computer Security Software – What You Really Need
  • Tutorials
AskCyber Home » News » News » Hotel Booking Site Fined for Failing to Disclose Data Breach

Hotel Booking Site Fined for Failing to Disclose Data Breach

2021-04-01 by Michelle Dvorak Leave a Comment

Booking GDPR Fine Data Breach

Booking.com Find by Dutch AP for Serious Data Breach

Note: We are reader supported and may earn a small commission when you click on links in posts

Hotel booking site Booking.com has been fined by the Dutch Data Protection Authority (AP) for failing to disclose a serious breach. The site was hit by a telephone scheme that compromised the sensitive data of over 4000 customers.

Booking Holdings Inc. (NYSE: BKNG) is a global hotel booking site headquartered in the Netherlands has been fined €475,000 by the Dutch AP.

In 2018, scammers targeted hotel employees in a telephone scam to steal login credentials. The employees worked at various hotels in the United Arab Emirates (UAE).

Cybercriminals then used the stolen usernames and passwords to compromise the Booking.com reservation system.

Booking.com was made aware of the attack on 13 January 2019.

SEE ALSO: Marriott Fined £18.4 M for GDPR Privacy Data Breach

The attackers exfiltrated sensitive personal information from 4,100 hotel customers. They also stole payment card numbers from 283 customers along with 97 credit card security codes, according to InfoSecurity.

Notifying customers that their information has been compromised by attackers is still the responsibility Booking.com even though the attack was not their fault.

The European Union’s General Data Protection Regulation (GDPR) requires that a company report an attack to the appropriate agency within 72 hours. Since the company is located in the Netherlands there is an obligation to report to the Dutch Data Protection Authority.

SEE ALSO: What is GDPR?

“Booking.com customers ran the risk of being robbed here. Even if the criminals did not steal credit card details, but only someone’s name, contact details and information about his or her hotel booking, the scammers used that data for phishing,” said the VP of the Dutch Data Protection Authority, Monique Verdier.

Filed Under: News Tagged With: Europe, GDPR

About Michelle Dvorak

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers


LinkedInTwitterFacebook

Reader Interactions

Leave a Reply Cancel reply

You must be logged in to post a comment.

Primary Sidebar

Subscribe to Our Free Newsletter

We Don't Share or Sell Your Info

Web Browsers

Where Are My Saved Passwords in Chrome?

Google Removes 70 Malicious Browser Add-ons from Chrome Web Store

Firefox 75 Reports Your Browser Settings to Mozilla

Categories

Cyber Security Field Guide

Computer Security While TravelingGet Our Cyber Security Field Guide - Available on Amazon!

Recent Posts

Program Mentor – Cyber Security – Western Governors University

PlayStation 5 Giveaway Scam The Red Flag in a $1 Entry Fee

Some Huawei Android Devices Infected with Malware

Israel’s Pfizer Deal Causes Data Privacy Concerns

20 Online Courses for a Successful Career in Cyber Security in 2021

IPVanish

IPVanish VPN

Cyber Security News

Some Huawei Android Devices Infected with Malware

… [Read More...] about Some Huawei Android Devices Infected with Malware

Dark Web Breach Leaks 600K Stolen Payment Cards

… [Read More...] about Dark Web Breach Leaks 600K Stolen Payment Cards

LinkedIn Data Leak Exposes Millions of Users

… [Read More...] about LinkedIn Data Leak Exposes Millions of Users

Facebook Responds to Data Leak

… [Read More...] about Facebook Responds to Data Leak

More Cyber Security News

Tags

amazon Android Apple bitcoin China chrome CISA credit card Cyber Attack DHS Equifax Europe Facebook facial recognition FBI Firefox FTC games GDPR Google Government hacker identity theft India iPhone Iran IRS LinkedIn Microsoft North Korea PayPal phishing phishing email ransomware Romance Scam Russia smartphone SolarWinds tax scam TikTok tutorial VPN WhatsApp WiFi Windows

Government

CBP Looks to Access Airline Passenger Data

FTC Releases Cyber Threat Video Playlist

Malware Found on US Government Funded Phones

UK NCA Reaches Out to Youth to Deter Cybercrimes

More Posts from this Category

Footer

Menu

  • Home
  • About
  • Authors
  • Newsletter Signup
  • PRIVACY POLICY

Search

Why Use a VPN?

NordVPN vs IPVanish VPN Review

NAVIGATION

  • Data Breaches
  • Data Privacy
  • Gamers
  • Scams
  • Malware

MEMBER NJCCIC

New Jersey Cybersecurity & Communications Integration Cell

STAY CONNECTED

  • Facebook
  • Instagram
  • Pinterest
  • YouTube
  • Twitter
  • RSS

Copyright © 2021 · AskCyberSecurity.com · METRONY, LLC

Go to mobile version