INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Hotel account takeover incident exposes customer reservation and credit card

| 2026-10-28 19:46 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach incident occurred on October 26th, where customer personal information and reservation information were leaked from Hotel Story's system due to external hacking. The leak was confirmed between 9:29 AM and 10:31 AM, with some hotels having their card-related information also exposed. Hotel Story has warned of the risk of phishing attacks and notified customers whose personal information was affected, providing guidance on preventing damage. The incident is believed to have been caused by an attacker accessing account information externally, allowing them to access reservation information abnormally. As a result, customer names, phone numbers, email addresses, reservation numbers, and accommodation information were leaked, with card-related information including card numbers also being exposed in some cases.
Technical Mitigations AI-generated
• Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope hospitalityhospitality
Incident Timeline
‎October 26th
Threat actors exploited a vulnerability in Hotel Story's system to leak customer reservation information and credit card details between 9:29 AM and 10:31 AM on October 26th.
tactic Data Breach
Hotel Story has announced a public notice to customers and partners regarding the data breach, stating that reservation information containing some customers' personal information was leaked from 9:29 AM to 10:31 AM on October 26th.
‎2026/10/28
Threat actors exploited a vulnerability in the Hotel Story reservation management service, allowing them to access and leak customer personal information and credit card details.
organisation Hotel Story
Hotel Story hacking leads to customer reservation information and credit card information leaks...
organisation the 'Hotel Memo'
However, a case of directly inputting card-related information into the 'Hotel Memo' area, which is not the dedicated card information management area, has been confirmed at some hotels during the reservation management process.
organisation Hotel Memo
The card-related information inputted into the Hotel Memo area was included in the reservation information, and it was confirmed that some of the reservation information was leaked outside during the current hacking incident.
organisation KISA
** The KISA reported the hacking incident and blocked the attack route, and initialized the password of the affected account.
organisation Korea Internet & Security Agency
The incident was reported to KISA (Korea Internet & Security Agency) immediately after the fact was acknowledged, and the agency explained that it was cooperating with related institutions to confirm the cause of the incident and the extent of the damage.
organisation SMS
Individuals whose personal information was leaked were notified through email and SMS (Short Message Service) about the incident and methods for prevention.
organisation Short Message Service
Individuals whose personal information was leaked were notified through email and SMS (Short Message Service) about the incident and methods for prevention.
Intelligence Sources
Dailysecu 2026-10-28