Expedia Group – Data Breach Investigation

Ahdoot & Wolfson is investigating a possible class action lawsuit against Expedia Group following reports of an alleged data breach. On November 9, 2026, a group known as N0N claimed responsibility for an alleged data breach involving Expedia Group. The company has not publicly confirmed the incident. The claims have raised concerns about the potential exposure of customer and traveler information and the security of personal data associated with Expedia Group services.

• Compromised Data Volume: Pending investigation. The extortion group’s claimed figures have not been independently verified.

• Customer Information: Allegedly including email addresses, loyalty program member IDs, points balances, membership tier details, and booking values.

• Traveler Profiles: The group also claims to have accessed traveler profile information. The specific information contained in these profiles has not been independently confirmed.

• Account Records: The group alleges possession of consumer account and email credential records. The nature and validity of these alleged credentials have not been verified.

• Potential Risks: If the claims are substantiated, affected individuals could face increased risks of phishing, account takeover, and unauthorized access to their accounts.

If you have been a customer of Expedia Group or used its travel booking services, your personal information may have been involved in the alleged data breach. Please fill out the form below, and one of our attorneys will contact you promptly.