Over 10 million files were discovered in a Prestige Software database that is publicly available online.
Security experts found that the Spanish software company neglected to password-protect an AWS S3 bucket that contained 2013-era hotel customers' personal information.
The organization's Cloud Hospitality platform, which hotels use to manage online reservations on websites like Expedia, Booking.com, and Hotels.com, is where the information was exposed.
A total of 24.4 GB of data, including the full names, email addresses, phone numbers, and credit card information of the guests, was disclosed.
"id": "PRE23912623",
"linkid": "prestige-software-s.l.",
"type": "Data Leak",
"date": "11/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"