Taiwanese online travel agency ezTravel warned customers of possible scams after a data breach affected more than 690,000 members and exposed information from some past bookings.
The company said Monday that its preliminary investigation found improper access to information from some earlier bookings. Purchase details, names, phone numbers and email addresses may have been exposed. ezTravel said customer payments remained secure and that credit card numbers, card security codes, account passwords, passport numbers and national identification numbers were not exposed.
ezTravel said it spotted unusual external network activity directed at its membership system on Nov. 7 and blocked the traffic. It hired an independent cybersecurity team to investigate and reported the incident to government agencies and police.
The company said it had contacted affected customers by text message and email. It warned that scammers might pose as bank or customer service staff to seek card details or verification codes, or steer customers toward ATMs or suspicious links. ezTravel said it would never ask customers for passwords or verification codes or direct them to an ATM to cancel installment payments.
