Travel industry tech solutions giant Sabre has updated after disclosing in May a data breach compromised its SynXis Central Reservations system.
Sabre completed its investigation into the breach which began in August 2016 and ran through March 2017, but did not disclose the number of accounts compromised.
It said ‘an unauthorized party gained access to account credentials that permitted unauthorized access to payment card information.’
The three-digit security code was exposed in some cases but a ‘large percentage’ of bookings were made without the code, including virtual card transactions.
"Our investigation did not uncover forensic evidence that the unauthorized party removed any information from the system, but it is a possibility," Sabre said.
The company said ‘even for those that did have reservations that were viewed, it varied with regard to the percentage of reservations that were accessed."
No other systems other than SynXis were affected.
More than 36,000 hotels use the SynXis reservations system.
The company has set up a webpage informing consumers and advising on the next steps for those who supect their accounts may be compromised.
