HomeNewsTwo out of three hotel websites inadvertently leak customers booking details to third party sites.

Two out of three hotel websites inadvertently leak customers booking details to third party sites.

Reader's Pick

Two out of three hotel websites inadvertently leak guests’ booking details and personal data to third-party sites, including advertisers and analytics companies, according to research released by Symantec Corp on Wednesday.

The study, which looked at more than 1,500 hotel websites in 54 countries that ranged from two-star to five-star properties, comes several months after Marriott International disclosed one of the worst data breaches in history.

Symantec said Marriott was not included in the study.

Compromised personal information includes full names, email addresses, credit card details and passport numbers of guests that could be used by cybercriminals who are increasingly interested in the movements of influential business professionals and government employees, Symantec said.

- Advertisement -

“While it’s no secret that advertisers are tracking users’ browsing habits, in this case, the information shared could allow these third-party services to log into a reservation, view personal details and even cancel the booking altogether,” said Candid Wueest, the primary researcher on the study.

The research showed compromises usually occur when a hotel site sends confirmation emails with a link that has direct booking information. The reference code attached to the link could be shared with more than 30 different service providers, including social networks, search engines and advertising and analytics services.

Wueest said 25 percent of data privacy officers at the affected hotel sites did not reply to Symantec within six weeks when notified of the issue, and those who did took an average of 10 days to respond.

“Some admitted that they are still updating their systems to be fully GDPR-compliant,” Wueest said, referring to Europe’s new privacy law, or the General Data Protection Regulation, which took effect about a year ago and has strict guidelines on how organizations should deal with data leakage.

close

Stay on top of Budget 2023 with our newsletter

- Advertisement -

We don’t spam! Read our privacy policy for more info.

close

Stay on top of Budget 2023 with our newsletter

We don’t spam! Read our privacy policy for more info.

- Advertisement -

Read latest Business News and Startup news on TechGraph. Watch live and latest news on TechGraph TV. Follow us on Facebook or follow us on Twitter and Instagram. Listen audio news from TechGraph Briefings on Spotify, Google Podcast, Amazon Music & on Apple Podcast.
 

Krishna Mali
Krishna Mali
Founder & Editor of TechGraph.

Latest News

Promoted Links

Related Stories

Japan approves 26 trillion yen as economic stimulus package to combat overseas risks

Japan's cabinet approved an economic stimulus package worth 26 trillion yen ($2...

Sino-US trade war offers Europe’s chance to bank more Chinese reserves: Analysis

Should European countries want the euro to replace the dollar as the world's do...

1Win App: Review India Apk for Android and iOS

The company 1Win has been successfully operating in the markets of many countri...

Employees union seeks FIR against Jet Airways boss Naresh Goyal, Vinay Dube and on SBI Chairman

The employee union of Jet Airways, which is facing its worst crisis, Friday sou...

Samsung Electronics asks its shareholders to use electronic voting for upcoming AGM

Technology giant Samsung Electronics has adopted electronic voting for the firs...

Rahul Gandhi hits on RCEP says, ‘Make in India’ has become ‘Buy from China’

Asserting that "Make in India" has become "Buy from China," Congress leader Rah...

NASA astronauts to carry first ever all-female spacewalk on 29 March

Two NASA astronauts are scheduled to carry out the first ever all-female spacew...

How AI Is Crucial For Business Strategy Management

There is no doubt that AI has been reshaping the business strategies world over...

Viber plans to roll out a new app-based payment feature

Rakuten Viber, a global leader in private and secure messaging and voice-based ...

Lava launches “LAVA Pay”, an offline-based digital payment app

India-based multi-national handset maker Lava International has launched its of...