The Lemon Fool

We hear that Expaedia has been the subject of a massive data leak of personal info and has been at risk for years.

What is the position if the credit card that I used has been replaced by a more up to date one from the same company.?

Does it mean that the old card on their system is of no use to crims and that I don't need to worry please?

feder1 wrote:We hear that Expaedia has been the subject of a massive data leak of personal info and has been at risk for years.

What is the position if the credit card that I used has been replaced by a more up to date one from the same company.?

Does it mean that the old card on their system is of no use to crims and that I don't need to worry please?

My experience with say Amazon is that when a card expires, say the expiry date invalidates it, then the system will reject it. I have often wondered though because the number on the card and the name are the same so I would have thought that it might be possible to 'doctor' it. Maybe some expert can tell us.

Dod

Dod101 wrote:

feder1 wrote:We hear that Expaedia has been the subject of a massive data leak of personal info and has been at risk for years.

What is the position if the credit card that I used has been replaced by a more up to date one from the same company.?

Does it mean that the old card on their system is of no use to crims and that I don't need to worry please?

My experience with say Amazon is that when a card expires, say the expiry date invalidates it, then the system will reject it. I have often wondered though because the number on the card and the name are the same so I would have thought that it might be possible to 'doctor' it. Maybe some expert can tell us.

Dod

On expiry your physical card will be replaced, as much as anything it's to ensure accounts continue to function due to wear and tear of the "strip" or "chip".

The account number is unlikely to change, however the CVV "3 digits on the back" likely will. In addition someone in possession of the number, from finding a statement etc. will still need in many cases online to know the expiry date, which isn't easily guessable and repeated "wrong" guesses are likely to be flagged on the security system of the issuer.

feder1 wrote:We hear that Expaedia has been the subject of a massive data leak of personal info and has been at risk for years.

What is the position if the credit card that I used has been replaced by a more up to date one from the same company.?

Does it mean that the old card on their system is of no use to crims and that I don't need to worry please?

Hmmnn, I was wondering why my credit card provider replaced my credit card recently, long before its expiry date!

Improved security was the reason given for reissuing it and, yes, I have used it to make bookings with these companies.

The old card was deactivated at the same time.

Watis

Not merely Expedia.

See for example https://lifehacker.com/what-to-do-about-the-data-leak-that-hit-8-major-hotel-b-1845623495

Including There’s also no evidence of scams or identity theft attempts against any of the individuals impacted by the leak., ... The server is now secured and there’s no evidence the data is being misused (yet), the information is sensitive enough that anyone who has used one of the following hotel websites since 2013 should be extra vigilant about their data going forward and further on for info. that may have been out there, such as card number, CVV, expiration date, etc.

Assuming that's the same one.