Payment Issue on Booking.com, Unauthorized Debit at Yellow Square Milan

In August, I made a reservation through Booking.com for Yellow Square Milan, and it was a cancellable booking. Today, I received a notification from Booking stating that I had to make a payment to prevent the cancellation of my reservation. To avoid cancellation, I made the payment, and a full $1530 was deducted from my account, even though the correct amount should have been 153 euros.

I have contacted both Booking and the hotel. The hotel claims that the incident happened due to a hack at Booking, while Booking asserts the opposite. After a little research, I discovered that Booking, which I considered trustworthy, has a security loophole, and many people have been hacked and lost money due to this vulnerability.

I expect Booking to take charge, assume responsibility, and promptly resolve my issue by refunding my payment. Otherwise, I will also pursue my rights legally and, if necessary, file a complaint with the prosecutor's office.