Orbitz, a subsidiary of Expedia, says it discovered the suspected breach in a legacy system. Orbitz says it may have exposed customer data collected between Jan. 1, 2016, and Dec. 22, 2017. A hacker may have accessed data tied to purchases, including names, birth dates, phone numbers, email addresses, mailing addresses as well as gender. The company says it has no “direct evidence” that payment card details and customer information was stolen. Expedia is the latest firm to fall victim to a breach after acquiring a company and its IT infrastructure.”]
Source: https://www.cuinfosecurity.com/expedias-orbitz-suspects-880000-payment-cards-stolen-a-10729

