The Icelandic data protection authority, Persónuvernd, has issued a warning regarding fraud attempts following a data breach on the Booking.com website.

The authority has been informed of scam attempts targeting users of the platform. These consist of sending messages or emails before a stay, aiming to deceitfully obtain credit card information. Persónuvernd recommends that affected individuals exercise caution and verify the authenticity of communications by contacting Booking.com directly, without responding to received messages. An investigation has been opened by the authority concerning the processing of personal data in this matter.