Many hotel reservation sites discover the risk of customer information leakage

Website Planet, which hosts expert blogs on web production and marketing information sites, is the hotel reservation site Hotels.com, Booking.com, Expedia, and Agora. ) Reported that more than 10 million customer information logs were in the public state due to a software issue.

All of these Ube sites use a channel management platform called Cloud Hospitality created by Prestige Software in Spain, and since 2013, customer information has been stored in Amazon AWS S3 without protection.

A rough list of publicly available customer information includes customer name and email address, phone number, ID number, credit card number, card name, CVV, card expiration date, total cost of hotel reservations so far, reservation schedule and guest name. Upon receiving the report, AWS said that it has kept the data confidential and that Prestige Software data has not been lost. However, according to a website Planet report, if someone got this information, it could lead to problems such as credit card fraud and customer information leakage.

In addition, not only the hotel reservation site that made the information public, but also a service called the channel management platform they use. Say service. Fortunately, there is no evidence that the information in question has actually been leaked or that damage is occurring, but if the information is leaked, it seems that Prestige Software, which provided the software, not the hotel reservation site, will be responsible. Related information can be found here .