ONDA, a leading Korean B2B booking and sales platform, says some data in its Hotel Plus booking management system was viewed without authorisation. Abnormal outside access to its API occurred on October 12–13. ONDA detected it on October 14 and blocked the attacker's IP and lookup path.
About 25,000 bookings may be affected; the exact scope is under investigation.
Potentially exposed data includes names, mobile numbers, booking numbers, booking status and stay details. So far, payment card data and passwords are confirmed as excluded. Hotels use Hotel Plus to manage bookings from multiple apps, so guests may be affected even if they never used ONDA directly.
No extra-payment or smishing losses have been confirmed. ONDA warns that the data could be used to impersonate it or partner hotels and request extra payment or personal or card details by messenger. It is investigating with Korea's internet security agency and outside experts, and has reported the case to police.
Other booking-system providers reported incidents; there is no evidence of a shared attack.
ONDA says it does not request separate payment by messenger after booking and before check-in. Do not follow suspicious links. Verify booking matters through the original booking site's official website or customer centre.
ONDA also recommends changing passwords.
Image: AI-generated
