SOCIAPlus
| Primary URL | Location | Industry | www[.]klook[.]com |
Country
Hong Kong
|
Hospitality & Leisure
|
|---|
Profile
SOCIAPlus is a Hong Kong-based travel company that operates a digital platform for travel bookings, serving customers through its website and mobile application. The company facilitates transactions for travel-related services, allowing users to complete reservations online. With its headquarters in Hong Kong, SOCIAPlus targets a customer base that engages in online travel reservations, though specific geographic markets beyond its operational base are not detailed in available information. The integration of third-party tools, such as analytics scripts, into its website infrastructure indicates a reliance on external technology partners to enhance user experience and business operations. This approach, while common in the travel technology sector, introduces potential supply chain vulnerabilities, as evidenced by a significant security incident in 2018. The company's service model emphasizes digital convenience, catering to travelers who prefer online booking channels, with a distinction between website and mobile app user bases in terms of security exposure during the breach period.
In June 2018, SOCIAPlus experienced a data breach stemming from malicious JavaScript code embedded in a third-party analytics tool used on its website. Attackers exploited this compromised script to intercept personal information and credit card details from customers who completed transactions via the website over a multi-month vulnerability window. Approximately 8% of the company's website transaction users were affected, while mobile app users remained unaffected due to the isolated nature of the breach. Upon discovery, SOCIAPlus contained the incident by removing the malicious code and engaged an external cybersecurity firm to investigate the compromise. The unauthorized access occurred through the third-party script, highlighting risks associated with supply chain security in digital travel platforms. This event underscores the company's operational reliance on integrated third-party services and its incident response protocols, which included swift mitigation and forensic analysis. The breach serves as a documented case of third-party risk in the travel industry, with SOCIAPlus's handling reflecting standard practices for containment and investigation post-discovery.