On December 13, 2019, Pennsylvania State Attorney General (AG) Josh Shapiro announced that the AG’s office reached a settlement with travel companies Orbitz and Expedia regarding a 2018 data breach that may have affected approximately 20,755 Pennsylvania customers and 880,000 payment cards globally.
Following an investigation that revealed a hacker used malware to steal personal and financial information, the travel companies agreed to pay $110,000 to settle the data privacy dispute.
