STAYSkift · 16h ago
Expedia Confirms Cyberattack Through Third-Party Vendor

Executive Brief
The 30-second read
Expedia Group has confirmed a cybersecurity breach originating from a compromised third-party technology provider. Executives should monitor corporate travel accounts while the company assesses the full extent of potential data exposure.
- 01Attackers gained access to Expedia systems through a breach at a partner vendor
- 02Expedia has not yet disclosed the volume or type of data potentially compromised
- 03The incident underscores critical vulnerabilities within travel industry supply chain security
- 04Immediate verification of corporate travel platform security protocols is recommended for enterprise clients
Go deeper · Stay playbook
Corporate Hotel Rates 2026: Negotiate & Lock In →AI-generated summary · Verify at source
Expedia says attackers reached its systems through a compromised technology provider. The company has not disclosed the extent of any data exposure.