Expedia subsidiary Orbitz has revealed that a legacy Orbitz travel booking platform had been compromised and personal user information and payment card data might have been accessed by unauthorized parties. The security incident was discovered on March 1, 2018, and apparently an attacker “may have accessed certain personal information, stored on this consumer and business partner platform, that was submitted for certain purchases made between January 1, 2016 and June 22, 2016 (for Orbitz platform customers) and between January 1, 2016 and December 22, 2017 (for certain partners’ customers).” The potentially compromised information includes customers’ full name, date of birth, phone number, email address, physical and/or billing address, and gender, as well as information tied to about 880,000 payment cards.

Read full news article on Help Net Security