Pennsylvania’s top law enforcement officer has announced that a settlement has been reached with a couple of travel websites following a data breach last year.
According to PA Attorney General Josh Shapiro, the website Orbitz which is owned by the website Expedia disclosed in March of 2018 that nearly 21,000 Pennsylvania customers could have been affected when a hacker installed malware that targeted payment cards.
A lawsuit alleges that Orbitz violated the law when it misrepresented privacy policies about safeguarding personal information of customers.
Under the settlement, Expedia and Orbitz will pay $110,000 and the companies will strengthen their security practices in the future. In an effort to protect against identity theft, customers are advised to regularly check credit reports and set up fraud alerts.