CybersecurityUpdated 1h ago

Expedia confirms breach through a third-party data provider

Expedia says attackers breached its systems through a compromised third-party data platform provider, using its trusted access to reach systems at multiple companies. The company says it took steps to contain the issue, began investigating with outside security experts, and that its platforms remained safe for travelers and partners. Cybersecurity reporting by Wiz and Sentra links the attack to a stolen vendor key from Qubole; that attribution is separate from Expedia’s confirmation. Meanwhile, the extortion group n0n claims it stole nearly one billion Expedia records and threatened to publish them unless the company reached a settlement. The group cites figures including more than 830 million loyalty-program records, 58 million traveler profiles, and over 333 million consumer account and credential records. Expedia confirmed the breach, not those claimed figures.

1 publisher1 report

Coverage started 1h ago