Expedia's Orbitz says breach hit 880,000 payment cards

(Reuters) — Orbitz, a subsidiary of online travel agency Expedia Inc., on Tuesday said about 880,000 payment cards had been hit by a security breach and that hackers may have accessed personal information of its customers.

The unit said an investigation showed that the attacker may have accessed personal information that was submitted for certain purchases made from Jan. 1, 2016, to Dec. 22, 2017.

"To date, we do not have direct evidence that this personal information was actually taken from the platform, and there has been no evidence of access to other types of personal information, including passport and travel itinerary information," Orbitz said.

The travel website operator said information such as names, phone numbers, email and billing addresses may have been accessed by the hacker.