Booking.com Ignores Privacy Request After Leaking Others' Booking PINs

Due to the lack of security and data verification in Booking.com's system, I am extremely disturbed that all details regarding reservations made by people I do not know have been sent to my email address for the past two days. Confirmation emails for reservations made under the names Yalçın T**** and Y**** s* O*****, which do not belong to me, are landing directly in my inbox, including sensitive information like confirmation numbers and PINs. I have no connection to these individuals, and the reservations are not mine, yet transactions continue to be processed through your system using my unverified email address.

I received a reservation confirmation like this for the first time on August 18, 2026. That same day, I called customer service, explained the situation in detail, and requested the deletion of this account that does not belong to me. I also submitted an account deletion request through your website. Despite this, no action was taken, no one followed up with me, and I continued to receive new reservation confirmation emails on August 19, 2026.

This situation is unacceptable in terms of both personal data protection and security. Allowing my email address to be linked to someone else's account without verification and continuing to use it in this manner is a serious security vulnerability. I demand that all accounts associated with my email address be immediately removed from your system, all connections to this email be terminated, and this address be secured so it cannot be used by other users without my permission again.

Furthermore, I request a written response regarding this process, clearly stating what actions were taken, when they were taken, and how the problem was permanently resolved. I expect all necessary precautions to be taken regarding the protection of my personal information and security, and for the frustration caused by this negligence to be handled seriously.