Expedia Confirms Cyberattack Through Third-Party Data Platform (skift.com)

Expedia Group confirmed that attackers reached its systems through a compromised third-party data platform, in a supply-chain attack that also affected other companies. Expedia hasn't said what data was exposed or named the vendor.