Expedia-owned Orbitz (NASDAQ: EXPE) has disclosed finding evidence of a massive data breach which took place between Oct. and Dec. and involved records dating between Jan. 1, 2016 and Dec. 22, 2017. The security breach may have exposed the data of thousands of customers, including information on 880,000 payment cards. Orbitz said it was in the process of notifying potential victims.
Customer information from multiple travel sites that used Orbitz as their booking engine was possibly compromised. The company said that the breach affected an older website and the platform of a business partner, but did not affect its current website, Orbitz.com. Orbitz said, “We took immediate steps to investigate the incident and enhance security and monitoring of the affected platform.” Expedia did not say what partner platforms were affected.
One of the affected sites was American Express. The breach affected Amextravel.com and travel booked through Amex Travel Representatives. American Express Global Business Travel and the AmericanExpress.com website were not affected. The company said in a statement said it was contacting the affected customers.
Orbitz said in a statement that it was unsure whether hackers had actually stolen customer information. The company said the breach unveiled information including people’s names, dates of birth, email addresses, street addresses, and genders. The company said it “has not found any evidence” that other customer information was affected, like Social Security numbers, travel itineraries, or passports.
The travel website operator advised customers who used its services during the prescribed time period to check their credit and debit card billings statements and contact their banks if they see any fraudulent charges. Customers with questions can visit orbitz.allclearid.com for more information. The affected parties are being offered a year of free credit monitoring services.
The hack is the second major issue since Expedia purchased Orbitz in 2015 for $1.6 billion. In July 2016, Expedia’s network crashed while it was integrating Orbitz’ back-end system with its own, causing considerable downtime that affected quarterly sales. Expedia shares fell 1.5 percent after the latest news broke. Its shares have declined more than 8 percent this year.