Tuesday, August 4, 2020
Home Lead Story Two in Three Hotel Websites Leak Guest Booking Details: Report

Two in Three Hotel Websites Leak Guest Booking Details: Report

All of the hotels did have a privacy policy but none of them mentioned this behaviour explicitly

Two in three hotel websites leak guest booking details and allow access to their personal data to third-party sites such as advertisers and analytics companies, a new report by California-headquartered global cybersecurity company Symantec said on Thursday.

“I tested multiple websites, including more than 1,500 hotels in 54 countries, to determine how common this privacy issue is. I found that two in three or 67 per cent of these sites are inadvertently leaking booking reference codes to third-party sites such as advertisers and analytics companies,” Candid Wueest, Principal Threat Researcher, Symantec, said in a statement.

All of the hotels did have a privacy policy but none of them mentioned this behaviour explicitly.

Notably, it has been almost a year since the General Data Protection Regulation (GDPR) came into effect in Europe, but many hotels affected by this issue have been very slow to acknowledge, much less address it.

However, some reservation systems were commendable as they only revealed a numerical value and the date of the stay and did not divulge any personal information. But a majority of them leaked personal data including full name, email address, postal address, mobile phone number, last four digits of credit card, card type and expiration date, and passport number.

Marriott
A deliveryman walks near entrance of a JW Marriott hotel in Beijing, China, Jan. 11, 2018. VOA

Over half (57 per cent) of the sites that were tested send a confirmation email to customers with a direct access link to their booking. This is provided for the convenience of the customer, thus, allowing them to simply click on the link and go straight to their reservation without having to log in.

“Since the email requires a static link, HTTP POST web requests are not really an option, meaning the booking reference code and the email are passed as arguments in the URL itself.

Also Read- Astronaut Floats in Space on Mural Sporting a Gandhi Patch on Shoulder

“On its own, this would not be an issue. However, many sites directly load additional content on the same website, such as advertisements. This means that direct access is shared either directly with other resources or indirectly through the referrer field in the HTTP request,” Wueest noted.

“My tests have shown that an average of 176 requests are generated per booking, although not all these requests contain the booking details. This number indicates that the booking data could be shared quite widely,” he added. (IANS)

STAY CONNECTED

18,964FansLike
362FollowersFollow
1,783FollowersFollow

Most Popular

Bhumi Pujan to End 28-year Fast of This Jabalpur Woman

By Sandeep Pauranik On August 5, when the 'Bhumi Pujan' for the construction of the Ram temple in Ayodhya will take place, a 81-year-old Urmila...

Dreams of this IPS Officer Come True With Bhumi Pujan in Ayodhya

By Sandeep Pauranik As preparations gather momentum for the foundation stone laying ceremony for the construction of the Ram temple in Ayodhya on Wednesday, many...

Letter to the Editor: Al-Rawi Misleading Public on Politics, Religion in Iraq

(Dr. Kumar Mahabir drafted this letter to address the issue of Al-Rawi misleading the public on politics and religion in Iraq) The Editor,  Al-Rawi misleading the...

Snapchat Bringing A New Feature to Take On TikTok

Photo-messaging app Snapchat has started testing a new feature that lets users set their Snaps with music, similar to what Chinese short-video making app...

The Residents in the Containment Zones Should Not Suffer From Hunger

By Salil Gewali How we wish that all our people were rich and they were able to afford their daily bread! Yes, at least now...

Monsoon Fruits You Should Be Including In Your Diet!

Monsoon demands some extra effort to stay fit and healthy. Since our immunity takes a dip during monsoons, making us susceptible to all kinds...

Here’s How Psyche Can Affect Skin Health

The skin and the mind are intricately related. The story is more complex than the proverbial appearance of "dark circles under the eyes" if...

Fitness Industry Could Revive Itself With Care, Better Tech

Though India has entered Unlock 3.0, the pause in the fitness industry is likely to last longer. The new normal is here to stay...

Recent Comments