Resumen
The activity was identified on October 14. Potential fields include reservation numbers, status and accommodation details; scope and totals remain unresolved. Cards were unaffected and passwords were not among the potentially exposed information.
Cronología
- Ocurrencia
- Descubrimiento
- Divulgación
Unauthorized viewing identified and emergency response started.
Official notice published.
Respuesta de la organización
ONDA blocked access paths and IPs, strengthened authentication, access controls and audit logging, and is working with KISA, police and specialists.
Qué puedes hacer
Do not act on messaging-app requests for extra payments; verify bookings through the original platform or property.
Fuentes
- Personal Information Breach and Our ApologyONDA Co., Ltd. · 2026-11-09