Information about 130 million Chinese hotel guests is sold on the darknet

[Carding 4 Carders]

The stolen data contains 240 million records with information about approximately 130 million guests of one of the hotels.

On one of the Chinese underground forums, a hacker sells the personal data of more than 130 million hotel guests for 8 bitcoins ($ 56 thousand). Cybersecurity company Zibao reported this to the Chinese media.

According to the hacker himself, he obtained data from Huazhu Hotels Group Ltd, one of the largest hotel chains in China, which operates 13 hotel brands with 5162 hotels in 1,191 Chinese cities.

According to the description of the "lot", the dump contains about 141.5 GB of information, including 240 million records of 130 million visitors to Huazhu hotels. The following information is offered about each guest: official registration data from the site (ID number, mobile phone number, email, login and password); registration data from the hotel itself (name, ID number, home address, date of birth); as well as booking data (name, card number, mobile phone number, date of arrival at the hotel, date of departure, internal hotel ID, room number).

Representatives of Huazhu have already released an official statement, which does not contain any details about the leak, but says that an investigation is underway, and law enforcement agencies have already joined the case.

Specialists of the Chinese information security company Zibao claim that they were able to confirm the authenticity of the data put up for sale and recognized them as genuine. Researchers believe that the leak itself occurred earlier this month and that Huazhu employees themselves are to blame. The fact is that according to Zibao specialists, someone from the company has uploaded copies of databases that are not intended for the eyes of prying eyes to GitHub by mistake.