Story perspectives

Booking.com Faces €475,000 Fine for Late Data Breach Report

4/15/2026

Summary

Story summary

Booking.com confirmed a data breach in which unauthorized parties accessed customer booking information.
Booking.com detected suspicious activity and reset PIN codes for affected reservations.
While financial data remains secure, the breach may have exposed names, emails, addresses, and booking details.
Booking.com reported the breach to Dutch regulators 22 days late, incurring a €475,000 fine.

History

Historical Context

The General Data Protection Regulation (GDPR) was enacted on May 25, 2018, to unify data protection laws across the EU, enhancing individual rights and imposing strict penalties for non-compliance. Booking.com's recent €475,000 fine for late breach reporting illustrates ongoing challenges in adhering to these regulations, emphasizing the critical need for organizations to prioritize data security and timely compliance to avoid significant penalties.

1 of 2

Story summary

Booking.com confirmed a data breach in which unauthorized parties accessed customer booking information.
Booking.com detected suspicious activity and reset PIN codes for affected reservations.
While financial data remains secure, the breach may have exposed names, emails, addresses, and booking details.
Booking.com reported the breach to Dutch regulators 22 days late, incurring a €475,000 fine.

1 / 2