ShinyHunters Claims 700K BCD Travel Customer Records Stolen in Dark Web Data Leak The hacking group ShinyHunters has reportedly stolen and begun publishing the personal data of 700,000 BCD Travel customers on the dark web, according to a report by Financieele Dagblad. The Dutch-owned business travel company confirmed detecting suspicious activity on an internal account and engaged external cybersecurity specialists to assess the breach, though it has not disclosed the full scope or any ransom demands. ShinyHunters, known for high-profile data thefts, claims to have accessed a Salesforce customer database and internal SharePoint sites, setting a June 1 deadline for payment before releasing the full dataset. The group, which previously targeted telecom provider Odido in February exposing over six million records specializes in data extortion rather than ransomware attacks. Other past victims include Ticketmaster and the Canvas education platform. BCD Travel, headquartered in Utrecht and part of the $24.4 billion BCD Group, stated that its services remain operational and IT systems unaffected. The incident follows ShinyHunters’ pattern of leveraging phishing or credential theft to infiltrate targets, as seen in the Odido breach, where an employee was tricked into entering login details on a fake site. The stolen BCD Travel data, totaling over 30GB, was verified by cybersecurity firm Passguard.

The California Attorney General reported a data breach involving BCD Travel Services B.V. on June 1, 2023. The breach was due to a vulnerability in the MOVEit Transfer application used by BCD Travel, potentially affecting personal information such as names, dates of birth, and credit card details of an unspecified number of individuals.