ezTravel Hit by Cyberattack with Over 690,000 Order Contact Records Leaked
Cybersecurity and privacy
Travel platform ezTravel announced that external cyberattacks were detected in its member center on November 7, 2026. An estimated 690,000+ customer records—including names, phone numbers, and order details—were improperly accessed. The company stated payment and order systems are segregated, leaving credit cards, passwords, and ID numbers safe, while third-party forensics and regulatory reporting are underway.
Taiwan travel platform ezTravel announced on November 9, 2026, that it detected abnormal external network attacks targeting its member center on November 7, leading to unauthorized access to historical order contact information. Initial findings indicate that more than 690,000 users were affected, with exposed fields potentially including names, email addresses, phone numbers, and product purchase records. The company stated that order databases and payment processing systems are managed separately, meaning credit card numbers, CVVs, account passwords, national ID numbers, and passport numbers were not compromised, keeping transaction security intact. Upon detecting the incident, ezTravel initiated defensive countermeasures to intercept and block abnormal traffic, engaged external cybersecurity teams for digital forensics, and notified regulatory authorities and law enforcement in accordance with personal data protection laws. Notifications without embedded links have been sent to affected customers via SMS and email, and the platform plans to review its access privileges and traffic monitoring systems. The attack vector and threat actor identity were not disclosed in the announcement. Separately, Minister of Digital Affairs Lin Yi-jing stated in the Legislative Yuan that multiple enterprises have faced cyberattacks recently alongside e-commerce provider 91APP, though official authorities have not disclosed the full list of victims or confirmed whether these incidents are connected.
Key takeaways
- ezTravel detected external network attacks on November 7, 2026, with over 690,000 order records exposed initially.
- Compromised fields include names and contact data; payment credentials and passwords remain safe due to system isolation.
- The platform blocked abnormal traffic, initiated digital forensics, notified authorities, and sent link-free alerts to users.
- Taiwan's Ministry of Digital Affairs noted multiple enterprise cyberattacks recently; incident correlations remain under review.
Source：INSIDE Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.