Could you be affected by the Booking.com data breach?

Booking.com has confirmed that unauthorised parties accessed customer information. If you’ve used the platform, your data could be involved. 

Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.

woman use booking app, booking com logo on the screen
woman use booking app, booking com logo on the screen

Quick & Simple

Register your interest

Stay Informed

Get justice

Overview

Booking.com has confirmed a data breach involving customer reservation information.

The company says it detected suspicious activity and acted to contain the issue, including updating reservation PINs and contacting affected users.

While financial information is not said to be accessed, the type of data involved still presents a risk. Travel booking details, combined with personal contact information, can be used to create highly convincing scams.

This is not the first time travel platforms have been targeted in this way. But what makes this incident stand out is how easily the exposed data could be used to impersonate legitimate bookings.

If you’ve used Booking.com, particularly for recent or upcoming trips, it’s worth understanding what may have been exposed and what steps you can take.

Register your interest today and we will keep you informed if one of our regulated UK partner law firms is able to investigate potential legal action relating to the breach. 

Booking.com data breach – At a glance  

Status

Stay Informed

Why register with Join the Claim?  

Join the Claim is bringing people together — uniting those who want answers, accountability and stronger data protections from the businesses they trust. 

Staying informed is the first step towards change. By registering alongside others affected, you’re showing that people expect better. And that when something goes wrong, they want to see it put right. 

What do we know about the Booking.com data breach?

  • Booking.com has said the breach may involve information linked to reservations. On its own, this might not seem as sensitive as financial data. But in practice, it can be enough to enable targeted fraud.  
  • Security experts are warning about potential “reservation hijack” scams, where criminals contact you pretending to be a hotel or Booking.com. 
  • Booking.com says it has contacted affected users. Even if you haven’t been contacted, if you have used Booking.com it’s sensible to take precautions. 

How Join the Claim works

Quick survey

Take a moment to answer a few simple questions so we can understand your connection and keep you updated.

Register interest

Share your details so we can keep you informed if any updates become available.

Join a claim

If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.

Latest updates on the Booking.com data breach

  • April 2026

    Booking.com confirms unauthorised access to customer booking data and begins contacting affected users. Join the Claim starts raising awareness of the data breach.  

We’ll provide more updates on the data breach as they occur.   

Join the claim
Join the claim

Are you affected by the Booking.com data breach?

Register to stay updated and we’ll let you know if a partner law firm takes this claim forward. 

Frequently asked questions about the Booking.com data breach

Booking.com identified suspicious activity where unauthorised parties accessed customer booking information. The issue has been contained, and affected users have been contacted. 

Booking.com has said the breach may involve information linked to reservations. This can include: 

  • Names 
  • Email addresses 
  • Phone numbers 
  • Home addresses 
  • Booking details (dates, locations, accommodation) 
  • Messages or information shared with the property 
     

Booking.com has said that financial details were not accessed.

Booking.com has contacted some users directly. But we don’t know if all affected users were reached. Even if you haven’t received a message, it’s sensible to stay cautious and follow basic security steps. 

Even if you haven’t been contacted, it’s sensible to take precautions. 

  • Be cautious with booking-related messages: Avoid clicking links or using contact details in emails, texts or WhatsApp messages. Go directly to the Booking.com app or website to check your reservation.
  • Never share payment details outside the platform: Booking.com has confirmed it will not ask for payment details via email, phone or messaging apps. 
  • Strengthen your account security: Change your password to something strong and unique (including anywhere that shared a password with Booking.com) and enable two-factor authentication where available 

Even if financial information was not widely exposed, personal details such as names, addresses and phone numbers can still be used in scams. 

This is where scammers use real booking details to impersonate a hotel or platform. They may ask for payment or claim there’s an issue with your reservation. 

At this stage, no group action claim has been announced in relation to this incident. However, large-scale data breaches are often investigated further, particularly where personal data may have been exposed or misused. If a partner law firm begins investigating this breach, we’ll update this page and explain what it could mean for affected users. Registering your interest means you’ll be kept informed. 

We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.  

By registering, you’ll stay up to date with any developments — from investigations to possible legal action.  

No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part. 

A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact. 

Rated Excellent


on REVIEWS.io

Rated Excellent on REVIEWS.io

Join the claim
Clifford
Very easy to sign up, hope its sorted soon
Susan
Very easy and quick to complete the claim Everything was explained well and fees payable in etc were made very clear
Peter
So easy to sign up for the claim

Latest news