Millions of hotel goers may have been exposed after hackers steal data and leak it on Telegram

Date:
Thu, 16 Apr 2026 09:51:18 +0000

Description:
Hundreds of accounts were compromised and used to pull sensitive data on millions of peope.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Pro Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Become a Member in Seconds Unlock instant access to exclusive member features. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are
now subscribed Your newsletter sign-up was successful Join the club Get full access to premium articles, exclusive features and a growing list of member rewards. Explore An account already exists for this email address, please log in. Subscribe to our newsletter Cybernews uncovers massive leak from Spanish
& Austrian hospitality platforms Attacker stole data via compromised
accounts, exposed 6.5GB on open server Nearly 5 million users affected, with names, emails, phone numbers, birth details, and IDs harvested Millions of records containing personally identifiable data were exposed on the internet when a cybercriminal who stole them left them on an open server , without a password or any other means of protection.

It was found by security researchers from Cybernews , who described their findings as a massive operation and a leak of staggering scale. The data was being stolen from Spanish and Austrian hospitality platforms, such as Chekin (a Spain-based automated check-in service) and Gastrodat (an Austrian hotel management software provider). Article continues below You may like Top photo ID apps leak user data - over 150,000 thought to have been affected Huge data leak of 149 million credentials exposed without any protection 98GB of
unique usernames and passwords from financial services, social media accounts and dating apps Huge OneFly data breach sees traveler IDs and payment details leaked Millions are affected The attacker apparently compromised 527 accounts belonging to both hotels and hosts, and used them to access booking systems across the affected providers. They then used automated Python scripts to
pull data from the platforms APIs. These scripts continuously collected booking and guest information and sent it to the attackers server, likely forwarding it in real time via Telegram.

The server itself was not protected, which is how Cybernews managed to pick
it up. The researchers said it contained roughly 6.5GB of files, with a massive trove of personal data.

They said that in total, almost five million users were affected by this incident. By extracting data from more than 170 facilities worldwide, the miscreants pulled info on around 400,000 separate bookings, grabbing stay dates, reservation IDs, guest names, property addresses, and internal safety flags used by accommodation platforms.

They also grabbed peoples full names, phone numbers, email addresses, dates and places of birth and, in some cases, ID document details. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get
all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Looking into individual platforms, Cybernews found that Gastrodat details contain 361,000 booking records totaling 11.6 million entries, including 4.9 million unique email addresses. The Chekin data, on the other hand, contains 311,400 records, with 133,900 unique emails and 253,000 ID document numbers.

The list of all compromised accounts, their credentials, email addresses, and JWT tokens, were also on the server, together with identifiers linking each account to specific booking platforms. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/millions-of-hotel-goers-may-have-been-e xposed-after-hackers-steal-data-and-leak-it-on-telegram


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)