A hacker is selling the personal details of over 130 million hotel guests for 8 Bitcoin ($56,000) on a Chinese Dark Web forum; The breach was reported yesterday by Chinese media after several cyber-security firms spotted the forum ad.
The seller said he obtained the data from Huazhu Hotels Group Ltd, one of China's largest hotel chains, which operates 13 hotel brands across 5,162 hotels in 1,119 Chinese cities.
Forum ad claims to sell
According to a description the hacker posted online, the stolen data is 141.5GB in size, contains 240 million records, with information on roughly 130 million hotel guests that stayed at one of Huazhu hotels.
The following user data is believed to be sold online: official website registration information (ID card number, mobile phone number, email address, login password); check-in registration information (customer name, ID card number, home address, birthday), and booking information (name, card number, mobile phone number, check-in time, departure time, hotel ID number, room number).
Read the full article here.