The California Office of the Attorney General reported that World Travel Holdings experienced a data breach starting on July 1, 2021. The breach involved unauthorized access to certain computer systems and was reported on October 18, 2021. Specific details about the number of individuals affected and the types of information compromised were not provided.

The California Office of the Attorney General disclosed a data breach affecting World Travel Holdings in December 2012. The incident stemmed from unauthorized access to the company’s booking system, leading to the exposure of credit card numbers and expiration dates belonging to an unspecified number of customers. While the exact scale of the breach remains undisclosed, the compromised data—primarily financial in nature—poses risks such as fraudulent transactions, identity theft, or phishing attempts targeting affected individuals. The breach highlights vulnerabilities in the company’s payment processing infrastructure, raising concerns over compliance with data protection regulations (e.g., PCI DSS) and the adequacy of cybersecurity measures in place at the time. Although no evidence suggests broader personal data (e.g., names, addresses) was stolen, the exposure of payment card details alone can inflict reputational damage and erode customer trust. The incident underscores the need for robust access controls, encryption, and continuous monitoring to prevent similar exploits in travel-related industries, where sensitive financial data is routinely handled.