A study conducted by Symantec found two-thirds of hotel websites inadvertently leaked customers' personal information and booking numbers to third parties, Reuters reports. Symantec analyzed 1,500 hotel websites in 54 countries. Researchers found the leaks occurred when the hotel sends confirmation emails with links to direct booking information. Third parties, such as social media platforms, search engines and advertising services, receive the customer data via the reference code attached to the link. Information may include customers' names, credit card numbers and email addresses. Symantec Senior Principal Threat Researcher Candid Wueest said some of the hotel chains admitted they are in the midst of updating their systems to comply with the EU General Data Protection Regulation. Marriott was not included in the study.
Full Story