{"id":40266,"date":"2021-04-01T16:12:11","date_gmt":"2021-04-01T16:12:11","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/"},"modified":"2021-04-01T16:12:11","modified_gmt":"2021-04-01T16:12:11","slug":"dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/","title":{"rendered":"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks"},"content":{"rendered":"<p>The Netherlands Data Protection Authority has <a target=\"_blank\" href=\"https:\/\/autoriteitpersoonsgegevens.nl\/nl\/nieuws\/boete-bookingcom-voor-te-laat-melden-datalek\" rel=\"noopener noreferrer\">fined<\/a> Booking.com \u20ac475,000 for notifying it too late that criminals had accessed the data of 4,109 people who booked a hotel room via the website.<\/p>\n<p>The Autoriteit Persoonsgegevens (AP) said criminals managed to extract the login credentials to their Booking.com accounts from employees of 40 hotels in the United Arab Emirates using social engineering techniques.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",button,mpu,\" data-sm=\",button,mpu,\" data-md=\",button,banner_plus,mpu\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>They then gained access to data including users&#8217; names, addresses, telephone numbers, and details about their booking. It added (translated from the Dutch):<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",button,mpu_plusplus,\" data-sm=\",button,mpu_plusplus,\" data-md=\",button,mpu_plusplus,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Booking.com told <i>The Register<\/i> there had been no incursion into its &#8220;internal systems (neither the code or databases that power the Booking.com platform were compromised),&#8221; adding that the incident was &#8220;isolated to 40 hotels in the UAE where partners provided the log-in details to their Booking.com accounts to online criminals.&#8221;<\/p>\n<p>Specifically, according a report from AP [<a target=\"_blank\" href=\"https:\/\/autoriteitpersoonsgegevens.nl\/sites\/default\/files\/atoms\/files\/besluit_boete_booking.pdf\" rel=\"noopener noreferrer\">PDF<\/a>, translated]: &#8220;An unknown third party gained access to the Booking[.com] Extranet, where Trip Providers &#8230; log in to [obtain] necessary reservation details of the guests.&#8221;<\/p>\n<p>The watchdog added that the data that was kept in the Extranet included first names, last names, addresses, telephone numbers, check-in and check-out dates, total price, reservation numbers, any correspondence between the hotel and the guests and &#8211; for 283 parties &#8211; their payment card details. Ninety-seven of these included the card verification code.<\/p>\n<p>The Dutch firm was handed a \u20ac475,000 fine for late notification. The AP said the company had been notified of the data leak on 13 January, 2019, but had not reported this to the watchdog until 7 February, noting: &#8220;That is 22 days late.&#8221;<\/p>\n<p>Under article 33 of the European General Data Protection Regulation, companies are mandated to report a &#8220;data breach&#8221; within 72 hours.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2021\/03\/04\/agree.png?x=174&amp;amp;y=115&amp;amp;crop=1\" width=\"174\" height=\"115\" alt=\"A user signing in to a Google Workspace account has to agree separately to the Core Services under their organisation\u2019s terms, and Additional Services under Google\u2019s terms. Which is used when? It\u2019s complicated.\"><\/p>\n<h2 title=\"Untangling privacy implications of using Google's productivity suite not easy\">Dutch government: Did we say 10 &#8216;high data protection risks&#8217; in Google Workspace block adoption? Make that 8<\/h2>\n<p><a href=\"https:\/\/www.theregister.com\/2021\/03\/05\/dutch_government_identifies_10_high\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>The affected customers themselves were told on 4 February 2019 \u2013 which was still 22 days after the leak. However, the watchdog added [<a target=\"_blank\" href=\"https:\/\/autoriteitpersoonsgegevens.nl\/sites\/default\/files\/atoms\/files\/besluit_boete_booking.pdf\" rel=\"noopener noreferrer\">PDF<\/a>], Booking did take other measures to limit the damage, including an offer to compensate any customers who were out of pocket.<\/p>\n<p>Booking told <i>The Reg<\/i> in a statement: &#8220;All affected customers were notified in February 2019 and subsequently fully supported, including with claiming chargebacks where necessary from their financial institutions.&#8221;<\/p>\n<p>Of the delay, it said: &#8220;We unfortunately didn&#8217;t get the matter escalated as fast as we would have liked internally. However, we have since implemented measures to further improve awareness and education amongst our partners and the employees who support them closely, with an aim of further optimizing the speed and efficiency of our internal reporting channels, which is an ongoing and iterative process.&#8221;<\/p>\n<p>AP vice president Monique Verdier said of the fine: &#8220;Booking.com customers ran the risk of being robbed here. Even if the criminals did not steal credit card details, but only someone&#8217;s name, contact details and information about his or her hotel booking&#8230; the scammers [then] used that data for phishing.&#8221;<\/p>\n<p>&#8220;This is a serious violation,&#8221; she added.<\/p>\n<p>While not on the scale of the 2018 Starwood Hotels megaleak, in which 339 million people&#8217;s data was stolen from the hotel chain and <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2020\/10\/30\/marriott_starwood_hack_fine_just_18_4bn\/\" rel=\"noopener noreferrer\">Marriott was fined \u00a318.4m<\/a> (without accepting liability), it is nonetheless notable because a fine for late notification (article 33) is quite rare. Companies are afforded protections from fines if, for example, they provide a reasonable explanation for the delay.<\/p>\n<h3 class=\"crosshead\"> <span>Twitter fined for keeping quiet about protected account bug<\/span><br \/>\n<\/h3>\n<p>Since the AP&#8217;s decision in December, which was only made public yesterday, just three other firms have been fined under article 33. One of these was Twitter [<a target=\"_blank\" href=\"https:\/\/edpb.europa.eu\/sites\/edpb\/files\/decisions\/final_decision_-_in-19-1-1_9.12.2020.pdf\" rel=\"noopener noreferrer\">PDF<\/a>], which was fined \u20ac450,000 ($500,000) by Ireland for late notification of a bug which meant &#8220;that if a Twitter user with a protected account, using Twitter for Android, changed their email address the bug would result in their account being unprotected.&#8221;<\/p>\n<p>Twitter was told of the bug via its bug bounty programme on 26 December 2018, only notifying Ireland&#8217;s Commission on 8 January 2019. It confirmed to the Irish data protector that the bug had affected 88,726 EU and EEA users who had a protected account and &#8220;rendered their previously protected Tweets (Tweets viewable by only approved followers of the account) public and viewable to anyone.&#8221;<\/p>\n<p>Booking is headquartered in Amsterdam, hence the ruling from the Dutch data protection authority. However, the AP said it had cooperated with other Euro privacy regulators in an &#8220;international investigation.&#8221;<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",button,dbutton,mpu_plus,dmpu,\" data-sm=\",button,dbutton,mpu_plus,dmpu,\" data-md=\",button,dbutton,mpu_plus,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>It has not been a great year for the accommodation bookings firm, which is an indirect subsidiary of the NASDAQ-listed Booking Holdings Inc. It reported revenues [<a target=\"_blank\" href=\"https:\/\/ir.bookingholdings.com\/static-files\/8134bee8-1555-48ce-b8c7-3bc1164364b4\" rel=\"noopener noreferrer\">PDF<\/a>] of just $6.796bn in fiscal 2020, down from $15.1bn the year before, and net income of $59m, down from $4.9bn in fiscal 2019. \u00ae<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2021\/04\/01\/booking_dot_com_fine\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Thousands of people&#8217;s personal information purloined after UAE hotels compromised The Netherlands Data Protection Authority has fined Booking.com \u20ac475,000 for notifying it too late that criminals had accessed the data of 4,109 people who booked a hotel room via the website.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-40266","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-01T16:12:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks\",\"datePublished\":\"2021-04-01T16:12:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/\"},\"wordCount\":785,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/\",\"name\":\"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2021-04-01T16:12:11+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/","og_locale":"en_US","og_type":"article","og_title":"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-04-01T16:12:11+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks","datePublished":"2021-04-01T16:12:11+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/"},"wordCount":785,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/","url":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/","name":"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2021-04-01T16:12:11+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YGZ-n9OvsVRyUpZQmkwOmQAAANc&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/dutch-watchdog-fines-booking-com-e475k-after-it-kept-customer-data-thefts-quiet-for-more-than-3-weeks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Dutch watchdog fines Booking.com \u20ac475k after it kept customer data thefts quiet for more than 3 weeks"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40266","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=40266"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40266\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=40266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=40266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=40266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}