Budget hotel chain Travelodge has been hit by a security breach which allowed an unauthorized third party to steal guest names and emails.
Account, bookings, passwords and payment details were not affected by the incident.
However customers’ first names and email addresses have been acquired by an unauthorized third party.
Guests are now at risk of receiving unwanted contact and have been advised to not give away any personal details from callers claiming to be from Travelodge.
Source: https://www.hotelowner.co.uk/15195-guest-information-stolen-in-travelodge-data-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/travelodge-hotels-limited
"id": "tra2124101122",
"linkid": "travelodge-hotels-limited",
"type": "Breach",
"date": "07/2018",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Hospitality',
'name': 'Travelodge',
'type': 'Company'}],
'customer_advisories': 'Advised customers to not give away any personal '
'details from callers claiming to be from Travelodge.',
'data_breach': {'personally_identifiable_information': ['First names',
'Email addresses'],
'type_of_data_compromised': ['First names',
'Email addresses']},
'description': 'Budget hotel chain Travelodge has been hit by a security '
'breach which allowed an unauthorized third party to steal '
'guest names and emails. Account, bookings, passwords and '
'payment details were not affected by the incident. However '
'customers’ first names and email addresses have been acquired '
'by an unauthorized third party. Guests are now at risk of '
'receiving unwanted contact and have been advised to not give '
'away any personal details from callers claiming to be from '
'Travelodge.',
'impact': {'data_compromised': ['First names', 'Email addresses']},
'response': {'communication_strategy': 'Advised customers to not give away '
'any personal details from callers '
'claiming to be from Travelodge.'},
'threat_actor': 'Unauthorized third party',
'title': 'Travelodge Data Breach',
'type': 'Data Breach'}