Expedia suffers supply chain breach via external data platform provider
Expedia confirmed that an attacker had compromised an external data platform provider and then exploited that provider's trusted access to enter its systems. The hacking group n0n claimed to have stolen more than 1 TB of data and hundreds of millions of customer and traveller records. The company did not confirm whether data had been leaked or the scale of any leak, and the attacker's claims have not been independently verified.
Key facts
- Affected organisation
- Expedia
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- A supply chain attack involving the compromise of an external data platform provider and subsequent abuse of its trusted access
- Location
- United States
Timeline
- Expedia confirmed a breach of its systems involving the abuse of an external data platform provider's access privileges.
- The attacker claimed to have stolen nearly one billion traveller records, but the company did not confirm that figure.
7 related reports
- Science & Tech: Massive ransomware attack potentially hit 1,
- Expedia Confirms Vendor Supply Chain Attack as N0n Claims Hundreds of Millions of Records
- Expedia Confirms Massive Data Breach, Potentially Millions Of Customer Records Leaked
- Expedia bestätigt Cyberangriff über einen Dienstleister
- Russian Cyberattackers Hit Expedia—Claiming Nearly A Billion Traveler Records Exposed
- Russian cyberattackers hit Expedia, with nearly a billion traveller records exposed
- 旅行予約大手Expediaにロシア系の「サイバー攻撃」、旅行者データ約10億件が流出か
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.