Travelport ViewTrip Reservation Data Breach
Travelport International Operations Limited, a premier global travel distribution system (GDS) and booking technology provider, suffered a data breach within its ViewTrip itinerary management platform.
Exposed Data Types
4- Names
- Reservation and travel information
- Purchase histories
- Email addresses
About This Breach
The incident stemmed from an API misconfiguration vulnerability: whereas passenger record retrieval typically requires two-factor validation (the PNR locator code and passenger surname), the flaw permitted unauthorized access to booking itineraries using solely the reservation reference. Formally registered by the Turkish Data Protection Board (KVKK) under Decision 2026/1797 on August 26, 2026, the breach affected 73,958 travelers globally. Exposed data includes passenger full names, PNR codes, flight, hotel, and rail segments, booking references, and contact details.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
