Orbitz isn't the first booking site to get hacked, and certainly won't be the last. The scope of this breach was global, and it's concerning that the hack captured information on nearly a million payment cards.
Orbitz says a legacy travel booking platform may have been hacked, potentially exposing the personal information of people that made purchases between Jan. 1, 2016 and Dec. 22, 2017.
The company said Tuesday about 880,000 payment cards were impacted.
Orbitz said data that was likely exposed includes name, payment card information, date of birth, phone number, email address, physical and/or billing address and gender. The company said evidence suggests an attacker may have accessed information stored on this consumer and business partner platform between Oct. 1, 2017 and Dec. 22, 2017.
The current Orbitz.com website was not involved in the incident. It’s now owned by Expedia Inc. of Belleview, Washington.
Orbitz is offering those impacted a year of free credit monitoring and identity protection service in countries where available.
Photo credit: The sign at an Orbitz office. Orbitz revealed it had been hacked in late 2017. Associated Press / Associated Press