Hotel booking website HotelHippo.com is facing an investigation by the Information Commissioners’ Office (ICO), following a website problem that allowed customer data to be easily extracted from the vulnerable website.
After initially being contacted by cybersecurity specialist Scott Helme on June 25, it seems the company refused to take action until contacted by BBC. The website was taken offline after the BBC contacted the HotelStayUK-contacted website
Helme was able to walk backwards using the sequential booking reference numbers, pulling customer data step-by-step.
If done properly, a customer’s name, home address, date, location and hotel stay duration could be retrieved – and a clever cybercriminal would be able to write a script to quickly pull all data from the Hotel Hippo website.
Here is what HotelHippo told the BBC:
“We confirm that we have taken down the HotelHippo.com website to take some urgent action to deal with a technical situation. Privacy of customer data is our prime concern, and we are committed to ensuring this safety.”
HotelHippo customers concerned about customer privacy can call them: 08446 646 000, or email info@hotelhippo.com.
Thank you to Scott Helme for providing us with this information
Image courtesy of Mr. Helme
If you play DnD and if you play DnD online there is a very high…
The new patch for Dragons Dogma 2 is here and it has fixed many of…
With unprecedented new performance hybrid architecture, 12th Generation Intel® Core™ processors offer a unique combination…
Leveraging more than 14 years of professional PC building know how, NZXT has provided the…
Everest Max is the last word in mechanical keyboards with modularity and customization unlike any…
G502 X PLUS is the latest addition to legendary G502 lineage. Reinvented with our first-ever…