You may want to be extra careful if you’re booking holiday travel for family and friends this year through Booking.com. A stunned user recently discovered that a typo in an email address could inadvertently share private trip info with strangers, who can then access sensitive information and potentially even take over bookings that Booking.com automatically adds to their accounts.
This issue came to light after a Booking.com user, Alfie, got an email confirming that he had booked a trip he did not.
At first, Alfie assumed it was a phishing attempt, so he avoided clicking any links in the email to prevent any malicious activity and instead went directly to his Booking.com account to verify that the trip info wasn’t there. But rather than feeling the sweet relief that his account had not been compromised, he was shocked to find the trip had somehow been booked through his account.