The hotel booking software provider reports an actor stole personal and payment card data of guests from hundreds of properties.
FastBooking, a Paris-based provider of hotel-booking software, is alerting client hotels to a data breach in which an attacker lifted personal information and credit card data from guests of hundreds of properties.
The breach took place on June 14, says FastBooking, which states it works with 4,000 partner hotels in 100 countries. In an email to affected properties, FastBooking says an attacker exploited a vulnerability in a Web application hosted on its server to install malware. The actor used this access to pilfer first and last names, nationalities, physical and email addresses, and booking-related details, such as hotel names and check-in/check-out dates.