MyRealTrip suffered a second, separate hacking incident on November 9, about two weeks after its first breach on October 25. The first incident exposed users’ phone numbers, email accounts, passport numbers and expiration dates, along with encrypted passwords, while the second also included nationality and information about companions linked to reservations. The company said credit card numbers were not taken, but it has not disclosed the number of affected people because investigations by relevant authorities are continuing.
MyRealTrip said it notified victims regardless of nationality and would pursue remedies under the law if actual misuse is confirmed, without announcing specific compensation such as passport reissue costs.