booking.com

They Didn't Get Your Password. They Got Everything Else.

John Z Black Apr 13, 2026

Incidents & Breaches #data-breach #booking.com #basic-fit #phishing #consumer-security #gdpr #social-engineering

Booking.com forced PIN resets. Basic-Fit disclosed a breach hitting roughly one million EU gym members. No passwords were stolen, both companies say. That's not the reassurance it sounds like.