Regulatory and Legal Affairs

📅 Bookings can be made through May 15, with the site closing on June 2, as per the company announcement.

💻 Apr 17, 2026: Booking.com experienced a cyber breach where hackers accessed reservation-level data, leading to targeted phishing attacks. While no financial information was stolen, the incident highlights vulnerabilities in interconnected travel systems. Attackers used stolen data for convincing phishing, exploiting hotel communication channels. This reflects a trend toward more precise cyberattacks in the travel sector. The breach signifies systemic risks in shared travel data ecosystems.

💻 Shiji and Origon Interfactura announced a strategic partnership in Mexico City on April 16, 2026. The collaboration integrates fiscal capabilities into Shiji’s hotel systems, addressing fiscal compliance challenges in Mexico's hospitality sector. This integration automates compliance, reducing errors and enhancing guest experiences. Shiji serves over 91,000 hotels globally with 5,000 employees, while Origon Interfactura offers expertise in fiscal compliance as a Certification Provider in Mexico and Latin America. This initiative aims to standardize solutions in the region.

🚨 Hospitality operators are being guided by a new framework to help navigate tiered security requirements. Developed without specific dates or locations mentioned, this framework addresses the "who" by focusing on operators in the hospitality industry, the "what" by offering structured guidance, and the "how" by providing a systematic approach to enhance security measures. By embracing these guidelines, hospitality businesses can better prepare for varying levels of security demands, ultimately aiming to improve safety and compliance standards across the industry.

📅 Apr 16, 2026: A data breach at Booking.com compromised customer details, sparking advanced scams. Hackers accessed names, emails, phone numbers, and booking info, enabling “reservation hijacking” where scammers posed as hotels. Although financial data wasn't breached, the data aids in phishing. Customers are urged to verify suspicious requests, as Booking.com doesn't ask for payment info via email or phone. The incident highlights cybersecurity risks in travel's digital platforms, stressing industry-wide vigilance.

🚨 Apr 14, 2026, Booking.com confirmed a data breach involving personal and booking-related data, yet withheld the number of users affected, which has eroded trust and raised transparency concerns. Although no financial information was compromised, the lack of disclosure underscores challenges in managing cybersecurity incidents in the travel industry. This incident emphasizes the need for clearer communication and transparency, as it impacts customer confidence and the broader travel sector's reputation.

🏆 Apr 14, 2026, FIFA canceled thousands of hotel rooms reserved for the 2026 World Cup in host cities like Philadelphia and Mexico City. Despite being contractually allowed, the decision, made months before the event, has unsettled industry stakeholders due to the lack of explanation. This move returns rooms to the market, boosting availability for fans and travelers. The widespread cancellations suggest a coordinated adjustment, sparking questions about FIFA's demand forecasts or logistical shifts.

📶 Apr 13, 2026, Booking.com faced a data breach where hackers accessed customer names, contact details, and reservation info, but not financial data. After detecting the breach, the company contained it, reset reservation PINs, and notified affected users. The full extent of impacted customers remains unclear. This incident is part of a trend of rising cybercrime and fraud within online travel platforms, pressuring companies to enhance security and address vulnerabilities.