MiniHotel (SaaS)

Nearly 300,000 Israelis' personal information was made public by an Iranian hacker organization targeting websites for Israeli travelers.

The compromised information includes ID numbers, addresses, credit card details, and more from Israeli travel sites.

The security of more than 20 travel-related websites was hacked, including hotel4u.co.il, hotels.co.il, isrotel.com, minihotel.co.il, trivago.co.il, and danhotels.com.

They sent the data breach letters to all affected and asked them to be alerted.

Source: https://www.thetechoutlook.com/news/technology/security/over-300000-israelis-personal-data-is-leaked-by-iranian-hackers-from-travel-websites/

TPRM report: https://scoringcyber.rankiteo.com/company/minihotel

"id": "min943171122",
"linkid": "minihotel",
"type": "Breach",
"date": "07/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Nearly 300,000',
                        'industry': 'Travel',
                        'location': 'Israel',
                        'name': 'hotel4u.co.il',
                        'type': 'Website'},
                       {'customers_affected': 'Nearly 300,000',
                        'industry': 'Travel',
                        'location': 'Israel',
                        'name': 'hotels.co.il',
                        'type': 'Website'},
                       {'customers_affected': 'Nearly 300,000',
                        'industry': 'Travel',
                        'location': 'Israel',
                        'name': 'isrotel.com',
                        'type': 'Website'},
                       {'customers_affected': 'Nearly 300,000',
                        'industry': 'Travel',
                        'location': 'Israel',
                        'name': 'minihotel.co.il',
                        'type': 'Website'},
                       {'customers_affected': 'Nearly 300,000',
                        'industry': 'Travel',
                        'location': 'Israel',
                        'name': 'trivago.co.il',
                        'type': 'Website'},
                       {'customers_affected': 'Nearly 300,000',
                        'industry': 'Travel',
                        'location': 'Israel',
                        'name': 'danhotels.com',
                        'type': 'Website'}],
 'attack_vector': 'Website Hacking',
 'data_breach': {'number_of_records_exposed': 'Nearly 300,000',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['ID numbers',
                                              'addresses',
                                              'credit card details']},
 'description': "Nearly 300,000 Israelis' personal information was made public "
                'by an Iranian hacker organization targeting websites for '
                'Israeli travelers.',
 'impact': {'data_compromised': ['ID numbers',
                                 'addresses',
                                 'credit card details']},
 'motivation': 'Targeting Israeli Travelers',
 'response': {'communication_strategy': 'Sent data breach letters to all '
                                        'affected and asked them to be '
                                        'alerted.'},
 'threat_actor': 'Iranian Hacker Organization',
 'title': 'Data Breach of Israeli Travel Websites',
 'type': 'Data Breach'}