Viator

Viator operates as a travel website subsidiary with its headquarters located in the United States of America. The organisation provides an online platform for users to book travel-related services. Its primary function is to facilitate reservations through a digital interface. Customers rely on the platform to arrange various travel activities. Viator collects personal and payment information during the booking process. The company aims to deliver a convenient and secure booking experience.

In September 2014, Viator experienced a security breach that compromised the data of approximately 1.4 million users. The incident exposed payment card details, including encrypted card numbers, expiration dates, names and billing addresses, for about 880,000 individuals. Additionally, account information such as email addresses, encrypted passwords and nicknames was accessed for roughly 560,000 users. The breach was identified after fraudulent charges appeared on customer payment cards, prompting an investigation involving forensic experts and law enforcement. In response, Viator strengthened its security posture by upgrading intrusion detection systems, enhancing firewalls and announcing plans to cease storing payment card data. These events highlight the organisation’s role as a handler of sensitive financial information within the online travel sector.