Flipkart-owned Cleartrip reports user data breach

Airline- and hotel-booking website Cleartrip said it has suffered a major data breach in its internal systems, in an emailed communication to customers on Monday.

“This is to inform you that there has been a security anomaly that entailed illegal and unauthorised access to a part of Cleartrip’s internal systems,” the email read.

The Flipkart-owned company clarified that while some personal details were a part of the leak, no sensitive information was compromised.


“We are completely mindful that this would be of concern to you. We would like to assure you that aside from some details which are a part of your profile, no sensitive information pertaining to your Cleartrip account has been compromised as a result of this anomaly of our systems,” the company wrote.

Cleartrip said it had reached out to the authorities and was taking appropriate legal action and recourse as per the law. It suggested customers reset their passwords as a precautionary measure.

“We have identified a security anomaly in a few of our internal systems. Our information security team is currently investigating the matter, along with a leading external forensics partner and is taking the necessary action. Appropriate legal action and recourse are being evaluated and steps are being taken as per the law.” a Cleartrip spokesperson told ETtech.

Walmart-owned Flipkart acquired a 100% stake in Cleartrip in 2021, in what was considered a distress sale of the $40-million company.

This is not the first time that Cleartrip – which also operates behind India in Oman, Qatar, Kuwait, Bahrain, and Saudi Arabia – has faced a data breach or hack. In 2017, its website was hacked and defaced for a few minutes by a group called Turtle Squad.