China Booking Site

Data Breach

1,925,001

Records Exposed

Dec 2024

Date of Breach

Database

Breach Type

Nov 2026

Added to Database

About This Breach

At an unknown date, a database belonging to a Chinese online travel/hotel booking website was distributed through a breach-trading Telegram channel. The dataset held roughly 1.94 million customer account records, each exposing a login (email address or site username), a plaintext account password, the customer's full Chinese name, their 18-digit national resident identity card number (身份证, which encodes date of birth and gender), and, for about a third of the records, a Chinese mobile phone number. Because the data combines reusable plaintext credentials with government-issued identity numbers and full names, it exposes highly sensitive, identity-theft-grade personal information for the site's users. No precise breach or compromise date has been established; the date shown reflects when the archive was observed being packaged and circulating.

Compromised Data Types

Email Address Username Plaintext Password First Name Last Name Phone Number Birthday Gender

Country

China

Language

Chinese

What Should You Do?

Get Full Breach Details with LeakedSource Pro

Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.

Change your password immediately on China Booking Site and any other site where you used the same password. Use a unique, strong password for each account.
Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
Use a password manager to generate and store unique, strong passwords for every account.