Nearly 300,000 Israelis' personal information was made public by an Iranian hacker organization targeting websites for Israeli travelers.
The compromised information includes ID numbers, addresses, credit card details, and more from Israeli travel sites.
The security of more than 20 travel-related websites was hacked, including hotel4u.co.il, hotels.co.il, isrotel.com, minihotel.co.il, trivago.co.il, and danhotels.com.
They sent the data breach letters to all affected and asked them to be alerted.
The group shared a note on their Telegram channel claiming about the attack.
TPRM report: https://scoringcyber.rankiteo.com/company/isrotel-hotel-chain
"id": "isr940171122",
"linkid": "isrotel-hotel-chain",
"type": "Breach",
"date": "08/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"
{'affected_entities': [{'customers_affected': 300000,
'industry': 'Travel and Hospitality',
'location': 'Israel',
'name': ['hotel4u.co.il',
'hotels.co.il',
'isrotel.com',
'minihotel.co.il',
'trivago.co.il',
'danhotels.com'],
'type': 'Travel Websites'}],
'attack_vector': 'Website Hacking',
'customer_advisories': 'Data breach letters sent to all affected',
'data_breach': {'number_of_records_exposed': 300000,
'personally_identifiable_information': ['ID numbers',
'addresses'],
'type_of_data_compromised': ['ID numbers',
'addresses',
'credit card details']},
'description': "Nearly 300,000 Israelis' personal information was made public "
'by an Iranian hacker organization targeting websites for '
'Israeli travelers. The compromised information includes ID '
'numbers, addresses, credit card details, and more from '
'Israeli travel sites. The security of more than 20 '
'travel-related websites was hacked, including hotel4u.co.il, '
'hotels.co.il, isrotel.com, minihotel.co.il, trivago.co.il, '
'and danhotels.com. They sent the data breach letters to all '
'affected and asked them to be alerted. The group shared a '
'note on their Telegram channel claiming about the attack.',
'impact': {'data_compromised': ['ID numbers',
'addresses',
'credit card details'],
'systems_affected': ['hotel4u.co.il',
'hotels.co.il',
'isrotel.com',
'minihotel.co.il',
'trivago.co.il',
'danhotels.com']},
'references': [{'source': 'Telegram channel of the hacker group'}],
'response': {'communication_strategy': 'Data breach letters sent to all '
'affected'},
'threat_actor': 'Iranian hacker organization',
'title': 'Data Breach of Israeli Travel Websites',
'type': 'Data Breach'}