Skip to content

Orbitz

Disclosed Mar 20, 20188 years ago382,612 affectedConfirmed

Official notice

What is known

People affected382,612 (as reported by the organization)
DisclosedMar 20, 2018
DiscoveredMar 1, 2018
HappenedOct 1, 2017
AttackHacking
Data exposedNames, Payment cards, Financial
SectorOther · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Orbitzoag.ca.gov · Official notice
Washington Attorney General breach notice: Orbitzatg.wa.gov · Official notice
Oregon DOJ breach notice: Orbitzjustice.oregon.gov · Official notice
Indiana Attorney General 2018 data breach report: Orbitzin.gov · Official notice
Maine Attorney General breach notice archive: Orbitzmaine.gov · Official notice

Notices filed

WhereFiledPeople
Washington AGresidents of WAMar 20, 20185,013
Maine AGresidents of MEMar 20, 2018749
California AGresidents of CAMar 21, 2018
Oregon DOJresidents of ORMar 21, 2018328,612
Indiana AGresidents of INMar 22, 20182,744
History of this record
  • 2026-09-25 · data_types: [] to ["names","payment-card","financial"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 382612 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · disclosed: 2018-03-21 to 2018-03-20 · backfill source
  • 2026-09-25 · discovered: empty to 2018-03-01 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Orbitz

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.