Expedia hit by supply chain breach through external data platform provider
Expedia confirmed that an attacker compromised an external data platform provider and then abused that provider's trusted access to enter its systems. The hacking group n0n claimed to have stolen more than 1 TB of data and hundreds of millions of customer and traveler records. The company did not confirm whether data had been leaked or the extent of any leak, and the attacker's claims have not been independently verified.
Key facts
- Affected organization
- Expedia
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- A supply chain attack that compromised an external data platform provider and then abused its trusted access
- Location
- United States
Timeline
- Expedia confirmed a breach of its systems involving the abuse of an external data platform provider's access privileges.
- The attacker claimed to have stolen nearly one billion traveler records, but the company did not confirm that figure.
7 related reports
- Science & Tech: Massive ransomware attack potentially hit 1,
- Expedia Confirms Vendor Supply Chain Attack as N0n Claims Hundreds of Millions of Records
- Expedia Confirms Massive Data Breach, Potentially Millions Of Customer Records Leaked
- Expedia bestätigt Cyberangriff über einen Dienstleister
- Russian Cyberattackers Hit Expedia—Claiming Nearly A Billion Traveler Records Exposed
- Russian cyberattackers hit Expedia, with nearly a billion traveller records exposed
- 旅行予約大手Expediaにロシア系の「サイバー攻撃」、旅行者データ約10億件が流出か
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.