Emerging Threats

Up to 880,000 Credit Cards Accessed in Orbitz Data Breach - What to Do Next

Written by a NortonLifeLock employee


March 21, 2018

If you’ve booked trips through Orbitz, hackers may have accessed your credit card or other payment card information in a recent attack.

What should you do now? Here are some steps you can take: Wait to hear from Orbitz, monitor your credit card and bank accounts, and take measures to help protect against identity theft.

Here’s what happened this year.

Reports from March 20 state that up to 880,000 payment card numbers and related information could’ve been exposed in a data breach. The additional information could include:

  • Customer’s full name
  • Date of birth
  • Phone number
  • Email address
  • Physical or billing address
  • Gender

Orbitz, which is owned by Expedia, apparently had two different data disclosures.

In the first disclosure, an attacker may have accessed customers’ personal information for some purchases made on between Jan. 1, 2016, and June 22, 2016, according to news reports.

In the second disclosure, customer data from other travel sites that used Orbitz to book travel between Jan. 1, 2016, and Dec. 22, 2017, may have been compromised, according to published reports. One of the affected sites was the American Express site

Orbitz says its current website wasn’t involved in this incident.

What you should do now

The company has also established a website with information on how to request the free services.

The Orbitz breach is a reminder that it’s good to regularly review credit card and bank statements, looking for unfamiliar transactions. If you see a transaction that isn’t yours, contact your financial institution immediately.

Keep in mind that it can be safer to use credit cards instead of debit cards when making purchases. That’s because debit cards give fraudsters direct access to the money in your checking account. With a credit card, your bank account isn’t affected until you make a card payment.


Isn't it time to upgrade your security?

Upgrading to new devices and software can often mean downgrading your privacy and security. It’s time to take your security seriously. Download the full version of Norton Security Deluxe free for 30 days, and test-drive it on up to 5 of your devices – PCs, Macs, smartphones or tablets.

Create an account today and be up and running in minutes.

Disclaimers and references:
Symantec Corporation, the world’s leading cyber security company, allows organizations, governments, and people to secure their most important data wherever it lives. More than 50 million people and families rely on Symantec’s Norton and LifeLock comprehensive digital safety platform to help protect their personal information, devices, home networks, and identities.

Copyright © 2023 NortonLifeLock Inc. All rights reserved. NortonLifeLock, the NortonLifeLock Logo, the Checkmark Logo, Norton, LifeLock, and the LockMan Logo are trademarks or registered trademarks of NortonLifeLock Inc. or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of, Inc. or its affiliates. Microsoft and the Window logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.