HotelStory Reports Data Breach Following Unauthorized Access
HotelStory confirmed a data breach on October 26, 2026, exposing customer reservation details and improperly stored credit card information.
HotelStory experienced a data breach on October 26, 2026, resulting in the unauthorized exposure of customer personal and reservation information. According to dailysecu.com, the incident occurred between 09:29 and 10:31 due to unauthorized system access.
The breach was facilitated by attackers who utilized compromised hotel account credentials to gain access to the reservation database. This allowed unauthorized parties to view sensitive information.
The leaked data includes customer names, phone numbers, email addresses, reservation numbers, reservation status, and accommodation details. Additionally, some credit card information was exposed because it had been improperly stored by certain hotels within the "hotel memo" field.
In response to the incident, HotelStory has blocked the unauthorized access path and reset passwords for all affected accounts. The company has also reported the breach to the Korea Internet & Security Agency (KISA).
Quick answers
When did the data breach occur?
The breach occurred on October 26, 2026, between 09:29 and 10:31.
What kind of information was leaked?
The leaked information includes customer names, phone numbers, email addresses, reservation details, and, in some cases, improperly stored credit card information.