Polaris Holdings: unauthorized access to its Booking.com account

On 23 May, hotel operator Polaris Holdings detected anomalies in its group account on the Booking.com reservation service. Through unauthorized access, payout bank accounts of several group hotels were changed to third-party accounts, and at one hotel part of the receivables was paid there, a loss of about 9 million yen. Payments were stopped at the other hotels. At the same time, guests of some hotels received phishing messages, and the company is checking whether data taken from the admin screen was used.