ezTravel Member Center Hit by Cyberattack, Over 690,000 Contact Records Affected

Travel e-commerce platform ezTravel disclosed a cybersecurity incident, stating that its systems actively detected external abnormal network attacks targeting its member center on November 7. Following preliminary checks and deduplication, the company confirmed that historical order contact records belonging to more than 690,000 individuals were improperly obtained. ezTravel stated it blocked abnormal traffic upon detection, engaged a third-party cybersecurity team for digital forensics, and formally notified competent authorities and law enforcement. Regarding the scope of compromised data, ezTravel stated the information may include customer names, email addresses, phone numbers, and product order information. However, the company emphasized that order data and financial transaction systems are strictly segregated, confirming that credit card numbers, CVVs, account passwords, national ID numbers, and passport numbers were not involved. Current platform operations, membership rights, and travel itineraries remain unaffected. ezTravel has notified affected consumers via SMS and email to warn against potential fraud and plans to review access controls and monitoring mechanisms to reinforce defenses.

Key takeaways

• ezTravel detected an external cyberattack on its member center on November 7, confirming that contact details of over 690,000 individuals were compromised.
• Exposed data may include names, phone numbers, emails, and order records, but excluded credit card details, passwords, ID numbers, or passport numbers.
• The company blocked malicious traffic, initiated digital forensics, notified authorities, and alerted users via link-free SMS and emails to prevent fraud.