Hacker News Reader

Comment by alexivanovs | Hacker News Reader

I agree, does this mean that they were able to successfully gain access to the Booking.com database to get those details, or was she just putting those claims out there for no apparent reason?

View on HN

The article reads to me like hinting as much as possible into the direction of Booking.com being hacked without risking a libel suit. The only thing that doesn't fit into the picture is the last but one sentence:

   A spokesperson for Booking.com told Money Box the firm 
   is working with police on how to prevent future phishing 
   attacks.

Who was the victim of a phishing attack here? Booking.com or their customers?

I suspect both: phish the hotel for login details to their admin interface for booking.com, then use those details to phish the customers.

Reply on news.ycombinator.com