In December 2021, the online booking service FlexBooker suffered a data breach that exposed 3.7 million accounts. The data included email addresses, names, phone numbers and for a small number of accounts, password hashes and partial credit card data. FlexBooker has identified the breach as originating from a compromised account within their AWS infrastructure. The data was found being actively traded on a popular hacking forum and was provided to HIBP by a source who requested it be attributed to "firstname.lastname@example.org".
Accounts breached: 3756794
Breached on: December 23, 2021
Exposed data: Email addresses, Names, Partial credit card data, Passwords, and Phone numbers
Added on: January 06, 2022