Hackers Leaked Personal Data Including ID Numbers and Encrypted Passwords

| 2026-10-29 08:06 HIGH LOW DATA BREACH

JSON

Executive Summary

Highlight CTI
AI-generated

A data breach on MyRealTrip, a popular travel booking platform, has exposed the personal information of travelers, including their names, contact information, encrypted passwords, and some users' passport numbers and expiration dates. The incident occurred between October 25 and October 28, when unauthorized access to the system resulted in the disclosure of this sensitive data. MyRealTrip confirmed that it had immediately blocked the unauthorized access and strengthened its security detection and blocking systems. Only a limited number of travelers had their passport numbers and expiration dates leaked, while information about credit card transactions and reservation records was not included in the leak. The company has set up a separate 'Check Personal Information Leaks' page to allow users to check their personal information leaks and specific items affected by the breach.

Technical Mitigations AI-generated

• User Training (ATT&CK mitigation for Impersonation): Train users to be aware of impersonation tricks and how to counter them, for example confirming incoming requests through an independent platform like a phone call or in- • Threat Intelligence Program (ATT&CK mitigation for Impersonation): Threat intelligence helps defenders and users be aware of and defend against common lures and active campaigns that have been used for impersonation. • Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.

Intelligence Metadata

Actors / Malware / CVEs / Campaigns

Target & Sectors

Global Scope hospitality

Incident Timeline

‎October 25

Threat actors gained unauthorized access to the company's system on October 25, resulting in the disclosure of personal data including ID numbers and encrypted passwords.

‎October 28

MyRealTrip posted a notice on its website stating "Personal Information Disclosure Facts and Apology" on October 28.

‎2026/10/29

Threat actors successfully breached MyRealTrip's website, exposing travelers' personal information, including ID numbers and encrypted passwords.

Click on any entity below to view its context and source!

organisation Check Personal Information Leaks'

The leaked personal information items may vary for each user, and MyRealTrip has set up a separate 'Check Personal Information Leaks' page, allowing users to check their personal information leaks and the specific items.

Dailysecu

organisation the Identity Verification Service

Users are advised to change their passwords on MyRealTrip's website and to verify their identity through the Identity Verification Service to prevent unauthorized use.

Dailysecu