Booking.com breach exposes customer data through compromised vendor chain

Short summary

Booking.com confirmed unauthorized third-party access to customer reservation data via a compromised vendor, exposing names, addresses, emails, and phone numbers. The article analyzes the systemic pattern of vendor-chain breaches driven by token sprawl, trust transitivity, and asymmetric incentives. It outlines a practical vendor-chain pentest methodology including vendor enumeration, trust simulation, signature validation review, token scope audits, and incident playbooks for vendor compromise.

• •Booking.com breach traced to a third-party service, not the core platform — a familiar vendor-chain attack pattern
• •Three root causes: token sprawl, trust transitivity, and asymmetric incentives between vendors and customers
• •Vendor-chain pentests should include enumeration, trust simulation, signature validation, token scope audits, and compromise playbooks

Generated with AI, which can make mistakes.