Taiwan | November 11, 2026

The ezTravel data breach has affected more than 690,000 members, according to reporting by Taiwan’s Central News Agency on a statement from the online travel agency. The company says unusual external network activity targeted its membership system and that information from some past bookings was improperly accessed.

ezTravel detected the unusual activity on November 7 and took steps to block the suspicious traffic, CNA reported. The company engaged an independent cybersecurity team to investigate and conduct digital forensics, and said it notified relevant government agencies and police.

Based on the company’s preliminary investigation, the information potentially exposed includes names, email addresses, phone numbers and purchase details from some previous bookings. ezTravel says the incident did not involve credit card numbers, card security codes, account passwords, passport numbers or national identification numbers.

Those exclusions are the company’s reported findings, not an independent guarantee that the investigation cannot change. Customers should also be alert to fraud: booking and contact details can make a convincing impersonation attempt possible even without payment-card numbers or passwords.

What Happened in the ezTravel Data Breach?

ezTravel operates an online travel service in Taiwan. According to CNA, the company said it detected unusual external network activity aimed at its membership system on November 7. It responded by blocking suspicious traffic and commissioning an independent cybersecurity investigation.

The company’s preliminary review found that information associated with some historical bookings had been improperly accessed. CNA reported that the incident affected more than 690,000 members. NewsFlayer has not independently reviewed the company’s underlying investigation or a complete list of affected individuals.

The ezTravel data breach does not mean that every customer’s information was exposed, or that every potentially affected person had the same details involved. The public reporting identifies categories that may have been exposed across the incident; an individual customer’s circumstances can differ.

The information reviewed for this article does not identify the attacker, explain the precise method of entry or establish that a particular criminal group was involved. It also does not establish a confirmed number of people who suffered subsequent fraud.

What Information May Have Been Exposed?

CNA reported that ezTravel’s preliminary investigation identified information from some past bookings that may include customers’ names, email addresses, phone numbers and purchase details. The company’s statement, as reported, does not establish that all of these categories were exposed for each affected member.

A name and email address can be used to address a message to the right person. A phone number creates another channel for unsolicited contact. Details about a past purchase may make a caller’s story sound more plausible, particularly if the caller claims to be following up on a booking.

That is a potential misuse scenario, not evidence that every affected customer has been contacted by a scammer. The reporting reviewed does not disclose whether the information was sold, publicly posted or used in specific fraudulent transactions.

Customers should refer to any genuine notification and the company’s official channels for information specific to their account. Avoid sending additional identifying information in response to an unsolicited message, even if the sender appears to know something about a previous trip.

What Does ezTravel Say Was Not Involved?

According to CNA, ezTravel said the incident did not involve credit card numbers, security codes, account passwords, passport numbers or national identification numbers. The company also said customers’ payment security had not been affected.

This is an important part of the ezTravel data breach disclosure. It should be attributed to the company and understood in the context of its preliminary investigation. The available reporting does not provide an independent forensic assessment of every system or guarantee that later findings will be identical.

The absence of payment-card numbers from the reported scope also does not make scams impossible. A fraudster could attempt to persuade a customer to provide a card number, one-time code or other information during a follow-up call. That would be a separate act of deception, not proof that such information was included in the initial data exposure.

Likewise, a customer who receives a suspicious payment alert should not assume it is connected to this incident. Verify account activity directly with the relevant bank or service provider using a trusted contact method.

How the Company Responded

In response to the ezTravel data breach, CNA reported that ezTravel blocked suspicious network traffic after detecting the activity and hired an independent cybersecurity team for investigation and digital forensics. The company said it reported the incident to relevant government agencies and police in accordance with personal-data protection requirements.

ezTravel also said it notified affected customers by text message and email. Its warning focused on scams in which someone impersonates travel-agency customer service or a bank representative and asks for card details or verification codes, directs a person to use an ATM, or sends a suspicious link.

The company said it would never ask customers to disclose account passwords or verification codes, or instruct them to use an ATM to cancel installment payments. Customers can independently contact ezTravel through its official website or a previously verified customer-service channel if they are uncertain whether a communication is genuine.

The public reporting reviewed does not set out a complete technical timeline or identify the security weakness involved. The company’s use of outside investigators does not, by itself, establish the intrusion method, attacker identity or final scope.

Seven Critical Risks for Affected Customers

The following are potential risks associated with exposed contact or booking information. They are not confirmed outcomes for every person affected by the ezTravel data breach.

1. Impersonated customer-service calls: A caller who knows a name or previous purchase may pretend to be from the travel agency. Familiar details alone do not prove the caller is legitimate.
2. Fake bank alerts: A scammer may claim that a travel payment must be reversed or verified. Contact the bank through a known number or official app instead of using a number provided by the caller.
3. Phishing emails and texts: Messages may imitate booking confirmations or account warnings and direct recipients to unfamiliar websites. Access the service independently rather than opening an unexpected link.
4. Requests for one-time codes: Verification codes can authorize sensitive account actions. A genuine-sounding explanation does not make it safe to disclose a code to an unsolicited caller.
5. ATM or refund scams: ezTravel says it will not instruct customers to use an ATM to cancel installment payments. Treat such instructions as a warning sign and verify directly with the company or bank.
6. Account targeting: Knowledge of a customer’s email address may help someone direct account-recovery or login attempts. The company says account passwords were not involved in this incident; that does not mean passwords should be shared or reused.
7. Longer-term social engineering: Booking information can remain useful to a fraudster after the original incident. A later message mentioning an older purchase still requires independent verification.

The existence of these risks does not establish that exposed information has been used in a particular scam or that any customer has lost money. Public reporting does not provide a confirmed fraud count associated with this incident.

What Should ezTravel Customers Do?

Verify messages independently

If a message claims that a booking has a problem, open the travel provider’s official website or app independently, or call a previously verified customer-service number. Do not depend on contact details in an unexpected message. Check the sender and the requested action carefully, especially if the message creates urgency.

Never provide an account password, card security code or one-time verification code to an unsolicited caller. The company’s reported warning also says it will not direct customers to operate an ATM to cancel installment payments.

Check accounts without assuming compromise

Review travel bookings and financial account activity through trusted channels. If a transaction or account action looks unfamiliar, contact the relevant service provider or financial institution promptly. An unfamiliar transaction requires investigation, but it should not automatically be attributed to the ezTravel data breach.

Use a strong, unique password for the travel account and other services, and enable multi-factor authentication where available. These are general account-security measures; ezTravel said account passwords were not involved in the reported incident. If a password is reused across services, changing it reduces the risk that a separate credential exposure affects multiple accounts.

Respond quickly to a suspicious interaction

If you have already shared a card number, verification code or password with someone you suspect is a scammer, contact your bank or service provider immediately through a trusted channel. Follow its instructions to secure the account and report unauthorized activity.

Keep records of suspicious messages and calls where practical, and report suspected fraud to the relevant local authorities. Avoid publicly sharing screenshots that reveal additional booking information or personal details.

What Remains Unknown?

The public reporting reviewed does not identify the attacker, describe the technical route into the membership system or specify when unauthorized access began. November 7 is the reported detection date; it should not be treated as proof of the first day of access.

CNA reports that more than 690,000 members were affected, but its article does not provide a customer-by-customer breakdown or an exact final total. The reported scope may be updated as the investigation continues.

The ezTravel data breach disclosure also does not establish that every potentially exposed data category applies to every customer, that information has been sold or that fraud has already occurred. Further company or official updates may clarify those questions.

Why Travel Booking Data Can Be Useful to Scammers

The ezTravel data breach highlights how travel purchases can create a recognizable context for future communications. A person may expect itinerary updates, changes to a reservation or payment-related messages from an agency. A fraudster who knows even limited booking details can try to exploit that expectation.

The defensive response is to separate the content of a message from its source. A correct name or reference to a prior purchase does not authenticate a caller. Conversely, a genuine company may send notices after an incident, so customers should verify the communication through an independently located official channel rather than assume every message is fraudulent.

Travel companies and their service providers also hold information for different business purposes. This incident is a reminder to review data retention, access controls and incident-response arrangements, but the public reporting does not establish which specific control failed at ezTravel.

For customers, practical precautions do not require knowing every technical detail of the investigation. Refusing to share verification codes, checking payment activity through trusted channels and reporting unusual requests can reduce the opportunity for social engineering.

Conclusion

ezTravel says unusual activity affected its membership system and that some past booking information was improperly accessed. CNA reports that more than 690,000 members were affected. The company says credit card numbers, passwords and certain identification numbers were not involved, based on the information it disclosed.

Customers should watch for impersonation attempts and verify booking or payment concerns directly with the company or their bank. The scale and technical cause of the incident should continue to be reported with appropriate attribution as the investigation develops.

Source note: This report draws on Central News Agency reporting published by Focus Taiwan and reporting by Liberty Times citing ezTravel’s statement. NewsFlayer did not independently review the company’s forensic investigation.

NewsFlayer — Bringing You the Latest Cybersecurity News from Around the World.