Booking.com Data Breach Exposes Andorran Customers to Phishing Scams

Booking.com has confirmed a cybersecurity breach that exposed personal data of some customers, including Andorran hotels and residents with active bookings. Unauthorized third parties accessed names, email addresses, phone numbers, and reservation details, which scammers have since used in targeted phishing attempts.

Affected Andorrans report receiving fraudulent WhatsApp messages—and in some cases emails—demanding bank details under the guise of confirming reservations or preventing cancellations. The messages create urgency by referencing real booking information and include links designed to trick users into entering sensitive financial data.

The company stresses that credit card numbers and direct banking information remained secure. Primarily impacted are those who made reservations through the platform, as the leaked details enable highly personalized fraud campaigns.

In response, Booking.com reset security PINs for affected accounts, strengthened internal protections, and sent warnings to users about suspicious contacts. It advises checking issues only via the official app or website and avoiding links from unverified channels. An internal investigation, aided by external cybersecurity experts, is underway to pinpoint the breach's origin and full scope.

Andorran hotels have notified guests that they never request additional payments via messaging apps or external links. While the incident appears contained, the platform urges ongoing caution, as stolen data could fuel further scams in coming weeks. Authorities echo calls for vigilance amid persistent risks.