Skip to content
Expedia Group
Seattle, United States1 source
Claimed:n0n claimed it on a ransomware leak site on 9 Nov 2026. Not confirmed by the organisation, so treat it as a claim, not a fact.
n0n claims massive data theft from Expedia Group
The cybercrime group n0n claimed on 9 November 2026 to have stolen over 1.2 billion records from Expedia Group, including loyalty program data, traveler profiles and account entries. Expedia has not confirmed any compromise.
- Type
- Data breach
- Records
- 1.2B records claimed
- Claimed by
- n0n
- First reported
- 9 Nov 2026
- Latest source
- 9 Nov 2026
What to do
- This is only a claim by the attackers so far. Do not panic, but do the basics:
- If you have an account, change that password, and anywhere you reused it.
- Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
- Treat this as unverified. Ask the organisation directly before acting on it.
- If this is a vendor of yours, ask what of your data they held and whether it was in scope.
- Reset any API keys, SSO trusts or shared credentials you have with them.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for Expedia Group
n0n has also hit
- N0N "Company #142"7 NovClaimed:N0n claims Company #142 consumer electronics data breachKR
- N0N "Company #143"7 NovClaimed:N0n claims Company #143 apparel retail data breachUS
- Dompé Farmaceutici S.p.A.6 NovClaimed:N0n claims breach of Dompé Farmaceutici claims data warehouseIT
- Company #1355 NovClaimed:N0n claims ransomware attack on Indonesian organizationID
- Delta Dental of Missouri5 NovClaimed:N0n ransomware group claims attack on Delta Dental of MissouriUS
- Company #1265 NovClaimed:N0n claims ransomware attack on Italian pharmaceutical firmIT
- Company #1203 NovClaimed:N0n ransomware group claims attack on US data analytics firmUS
- Company #1223 NovClaimed:N0n claims ransomware attack on US travel loyalty firmUS
Sources
1Confidence 60% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.