Booking.com has confirmed that unauthorised parties accessed customer information. If you’ve used the platform, your data could be involved.
Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.
Register your interest
Overview
Booking.com has confirmed a data breach involving customer reservation information.
The company says it detected suspicious activity and acted to contain the issue, including updating reservation PINs and contacting affected users.
While Booking.com says financial information was not accessed, the type of data involved still presents a risk. Travel booking details, combined with personal contact information, can be used to create highly convincing scams.s.
Security researchers have continued to report “reservation hijack” scams targeting travellers. These scams use genuine booking information to make fraudulent messages appear more convincing.
If you’ve used Booking.com, particularly for recent or upcoming trips, it’s worth understanding what may have been exposed and what steps you can take.
Register your interest today and we will keep you informed if one of our regulated UK partner law firms is able to investigate potential legal action relating to the breach.
Booking.com data breach – At a glance
Join the Claim is bringing people together — uniting those who want answers, accountability and stronger data protections from the businesses they trust.
Staying informed is the first step towards change. By registering alongside others affected, you’re showing that people expect better. And that when something goes wrong, they want to see it put right.
How Join the Claim works
Take a moment to answer a few simple questions so we can understand your connection and keep you updated.
Share your details so we can keep you informed if any updates become available.
If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.
Latest updates on the Booking.com data breach
September 2026
Join the Claim continues to monitor the Booking.com data breach.
Security researchers have continued to highlight the wider threat of reservation hijacking, where genuine booking information can be used to make scams more convincing.
April 2026
Booking.com confirms that unauthorised parties accessed customer booking information and begins contacting affected users. Reservation PINs are updated following the incident.
Booking.com also notifies relevant data protection authorities. The company says it has remediated the issue and is cooperating with the relevant authorities.
Join the Claim starts raising awareness of the data breach.
We’ll provide more updates on the data breach as they occur.
Are you affected by the Booking.com data breach?
Register to stay updated and we’ll let you know if a partner law firm takes this claim forward.
Frequently asked questions about the Booking.com data breach
Booking.com identified suspicious activity involving customer reservations. The company says unauthorised parties accessed some guests’ booking information and that it took action to contain the incident.
Booking.com has also notified relevant data protection authorities and says it is cooperating with them.
Booking.com says information accessed could include:
Booking.com says financial information was not accessed from its systems.
Booking.com says it contacted affected customers following the incident.
If you received a notification from Booking.com about the breach, your reservation information may have been involved. Even if you haven’t received a message, it’s sensible to stay cautious about unexpected communications relating to your bookings.
Even if you haven’t been contacted, it’s sensible to take precautions.
Even though Booking.com says financial information was not accessed, personal and booking information can still be valuable to criminals.
Knowing details about a genuine reservation, alongside someone’s name and contact information, can make phishing messages and other scams much more convincing.
A reservation hijack is a scam where criminals impersonate a hotel, accommodation provider or booking platform and contact a traveller about a genuine reservation.
They may use real booking details to make the message appear legitimate before claiming there’s a problem with the reservation or asking for payment.
Reservation hijacking existed before this breach. However, security experts have warned that access to genuine customer booking information can make these scams more convincing.
At this stage, no group action claim has been announced in relation to this incident. However, large-scale data breaches are often investigated further, particularly where personal data may have been exposed or misused. If a partner law firm begins investigating this breach, we’ll update this page and explain what it could mean for affected users. Registering your interest means you’ll be kept informed.
We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.
By registering, you’ll stay up to date with any developments — from investigations to possible legal action.
No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part.
A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact.
No. You are free to contact a solicitor directly at any time if you would like legal advice or wish to explore a claim.
When you register your interest with Join the Claim, we’ll keep you updated if one of our regulated partner law firms decides to take the claim forward. However, other law firms may also investigate or pursue claims independently of Join the Claim.
Registering for updates does not prevent you from speaking to another law firm or joining a claim elsewhere.
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group or individual claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a trading name of Join the Claim Limited, authorised and regulated by the Financial Conduct Authority (FRN: 1053404). Registered in England and Wales, Company No: 16245278. Registered office: 32 Eyre Street, Sheffield, S1 4QZ.
© Join the Claim All Rights Reserved |
