Monday, 18 June 2012

Kayak.com investigates after customers discover security breach

We had a caller and landed an exclusive on this story, which is a pretty interesting situation.

He was trying to clarify a line on his credit card bill, but ended up accessing scores of strangers’ personal information.

Kevin Hunt travels whenever he finds time off and a good deal. So when his credit statement listed Kayak.com, he went to the travel booking site to see which trip the charge was for.

The site allows people to find reservation details by searching their last name and the last four digits of their credit card. When Hunt keyed in his information, he found his hotel booking for an upcoming trip to Vermont.

But he also found bookings for people named Hunt in Oklahoma and Massachusetts, complete with their home addresses, phone numbers and emails, as well as credit card expiry dates.

Read my report in the Toronto Star.

No comments:

Post a Comment