Expedia have announced they have changed the details sent via the Reservations API
Traveler Phone Number Phishing Awareness & Actions
Across the travel ecosystem, we’ve identified an increase in off-platform phishing attempts targeting travelers. This does not involve a breach of Expedia Group systems. In these scenarios, bad actors use messaging platforms such as WhatsApp to impersonate suppliers and mislead travelers. These attempts rely on access to traveler phone numbers obtained through compromised third-party or supplier systems.
As a precautionary and temporary measure, we've taken the follow steps:
• Disabling the ability to view and export traveler phone numbers in Partner Central.
• Substituting travelers’ actual phone numbers with a generic, non identifiable number for all API received reservations.
How this may impact you and the connected properties
For your connectivity integration, we expect minimal impact on reservation delivery success, though the exact impact may vary by integration.
However, we recognize traveler phone numbers may often be used for guest communication or obtaining reservation information. We have communicated to the properties that they can minimize impact and maintain secure communication with travelers by:
• Leveraging Expedia’s in-platform messaging capabilities and communication tools (where available).
• Reviewing internal processes or integrations that rely on traveler phone numbers.
• Reinforcing guidance with their teams to avoid initiating off-platform contact with travelers unless necessary.