- Booking.com apparently links reservations to accounts without any verification
- User finds typing the wrong email address could link your vacation to another account
- The company did not remove a false booking from one user’s account
Travellers using Booking.com to pay for accommodation and transport have been warned about a simple typo bug that could see them share their private trip details with strangers, giving them access to sensitive information and even allowing them to take control over bookings.
The issue came to light when a Booking.com user, named as Alfie, received an unexpected email confirming a trip that he hadn’t booked.
Although he exercised caution by not following links on the email, suspecting it was a phishing scam, the mysterious booking had been added to his account, confirming suspicions that the email was indeed from Booking.com.
After failing to receive an explanation from the company’s support team, Alfie shared the story with Ars Technica which pressed…





























