ezTravel member center hit by external attack; historical order contact data of over 690,000 people improperly obtained

1. Nov 7, 2026, 12:00 PM
   ezTravel detects an external attack on its member center^[1]
2. Nov 9, 2026, 3:48 PM
   ezTravel says order contact data of over 690,000 people was improperly obtained^[1][2]
3. Nov 10, 2026, 12:15 PM
   ezTravel adds details: third-party forensics, police notified, 690k+ affected after deduplication^[3]

   iThome reports that ezTravel has engaged a third-party security team for investigation and digital forensics and has notified regulators and police. In a statement to iThome, the company said more than 690,000 people were affected after system matching and deduplication, and that order data is kept strictly separate from payment systems. It will cooperate with the judicial investigation to trace the attack and review data access permissions, security protections and abnormal-traffic monitoring.

Vendor guidance

1. 1
   Beware of fake customer-service scams mitigate^[1][2]

   Do not give card details or SMS codes or operate ATMs on instructions from unknown callers; ezTravel notices contain no links.