Orbitz says 880,000 accounts compromised in data breach

Orbitz announced today that it has identified and remediated a data security incident affecting a legacy travel booking platform.

“While conducting an investigation of a legacy Orbitz platform, we determined on March 1, 2018 that there was evidence suggesting that, between October 1, 2017 and December 22, 2017, an attacker may have accessed personal information stored on this consumer and business partner platform,” the company said in a statement. “We took immediate steps to investigate the incident and enhance security and monitoring of the affected platform. As part of our investigation and remediation work, we brought in a leading third party forensic investigation firm and other cybersecurity experts, began working with law enforcement, and took swift action to eliminate and prevent unauthorized access to the platform.”

While the current Orbitz.com website was not in any way involved in this incident, the payment information, name, date of birth, billing address and other personal information on up to 880,000 accounts may have been accessed in the breach, but there is no evidence, as of today, to show that this information was taken during the attack.

“Ensuring the safety and security of the personal data of our customers and our partners’ customers is very important to us,” Orbitz said. “We deeply regret the incident, and we are committed to doing everything we can to maintain the trust of our customers and partners.”

The company is working quickly to notify impacted customers and partners and is offering affected individuals one year of complimentary credit monitoring and identity protection service in countries where available. Additionally, they are providing partners with complimentary customer notice support for partners to inform their customers, if necessary. Anyone who is notified is encouraged to carefully review and monitor their payment card account statements and contact their financial institution or call the number on the back of their card if they suspect that their payment card may have been misused.

Orbitz customers with questions may call 1-855-828-3959 (toll-free U.S.) or 1-512-201-2214 (International), Monday through Saturday, 8:00 am to 8:00 pm CDT or visit orbitz.allclearid.com for more information.