Orbitz Breach Involves 880,000 Travelers

Orbitz, a subsidiary of Expedia, said that hackers may have accessed payment information from its consumer platform and partner platform in 2016 and 2017. In total, 880,000 payment cards may have been gathered.

The company has said that it does not have direct evidence that the information was actually taken but instead said that information such as names, phone numbers, payment card information, date of birth, email and billing addresses may have likely been accessed. U.S. social security numbers were not involved and the company said there was no evidence of access to passports or travel itinerary information.

The information for consumers on Orbitz.com may have been accessed for purchases between January 1 and June 22, 2016. Additional travel sites using Orbitz for booking may have been compromised for consumers between January 1 and December 22, 2017. The breaches of partner platforms included Amextravel.com and travel booked through Amex Travel Representatives.

Expedia has notified affected customers and partners, as well as created a website with information.