ShadowMap

Dark Web Exposure for booking.com

Credentials, devices and data found in dark web stealer logs & breaches
100
Exposure level: Critical
booking.com scores 100/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 19 days ago Last 90 days +13% 0% reuse a top-10 password
Employee exposure
corporate accounts — @booking.com
3,682
leaked credentials · 575 compromised devices
Top exposed employee accounts
booking.com764
stefania.fi***@booking.com102
//booking.com vagina***@interia.pl101
mohamed.hall***@booking.com92
fadi.c***@booking.com89
Where staff accounts were caught
https747
account.booking.com701
okta.booking.com462
secure.booking.com253
accounts.google.com104
Customer exposure
stolen logins for booking.com
1,927,797
leaked credentials · 6,511 compromised devices
Top exposed customer accounts
mauros***@alice.it511
anlub***@hotmail.com56
iku***@hotmail.com39
crazysex***@outlook.com38
foyer***@gmail.com36
Most targeted services
account.booking.com831,209
secure.booking.com423,966
www.booking.com216,240
admin.booking.com52,621
join.booking.com15,057
1,929,738
Exposed Credentials
6,525
Compromised Devices
7
Credit Cards
190
Crypto Wallets
10,310
Auth Tokens
19,583,365
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Google Workspace105

Most common passwords 0% reuse a top-10 password

12***781,064
12***56621
12***89553
Pa***rd339
pa***rd280
Ku***23254
ad***in239
pa***rd226
82***95218
25***18214

Stolen sessions (active cookies that can bypass MFA)

youtube.com611,137
google.com326,374
bing.com226,516
adnxs.com212,670
pubmatic.com198,495
criteo.com179,973

Compromised despite antivirus (AV installed on infected devices)

Windows Defender466
Avast Antivirus36
McAfee30
ESET Security14
Kaspersky7
360 Total Security5

Financial, crypto & app tokens

Crypto wallets
metamask127
exodus19
phantom19
electrum6
bitget5
trust4
App / session tokens
Google9,343
Discord710
Telegram257

Where devices were compromised (by country)

Mexico [MX]138
Colombia [CO]70
Peru [PE]68
Argentina [AR]38
Chile [CL]36
Top cities
Lima36
Bogotá18
Puebla City12
Guayaquil10
Mexico City9

Browsers & apps affected

Google Chrome (Default)1,171
Microsoft Edge (Default)916
Edge [Default]741
Chrome [Default]687
Google Chrome (Profile 3)215
Google Chrome (Profile 1)209

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.