Friday, 24 March, 2023

Cleartrip breach exposed not only private company information but also customer data

<p>Major hotel booking site Cleartrip&#39;s notification of the security incident appears to minimise the security incident by asserting that no critical consumer data was accessed. Screenshots collected by ETCISO demonstrate that the stolen data also includes Cleartrip&#39;s internal documents in addition to huge data dumps of client information. The complete database that was advertised for sale on a dark web forum has already been purchased for an undisclosed sum.</p>