The personal data of customers who use hotel booking sites in the style of booking.com have been exposed: Gadget.ro – Hi-Tech Lifestyle

Software

Website Planet discovered an AWS S3 server left unprotected by Prestige Software, a company developing a platform to automate the room listing process called Cloud Hospitality, a platform used by many hotels and travel portals. Whoever discovered the server was able to access the databases without the need to login

Affected sites include Booking.com, Expedia, Agoda, Amadeus, Hotels.com, Hotelbeds, Omnibees and Saber, and over 10 million files were found on unprotected servers, totaling over 24GB.

In the list of information shown we have personal data, hotels, rooms and periods booked, credit card data, with number, expiry period and CVV code.

It is not yet known whether this information was accessed by unauthorized persons before it was found by Website Planet.

Source: profit.ro