2026 BookMyForex (MakeMyTrip group) — user reports of suspicious card activity; company denied classic database leak in trade coverage
Data compromised
Potential card/OTP surfaces if fraud ring recycled metadata
Technical writeup
Feb 2026 Indian trade outlets captured consumer alarms about BookMyForex multi‑currency cards alongside issuer transaction blocks, while MakeMyTrip‑linked statements denied a conventional DB exfiltration and pointed at issuer fraud controls—BreachHistory still logs the incident window for Fx fintech trust even where forensics conclusions split public narratives.
Root cause
Fraud/abuse hypothesis mix—card processor controls vs. rumored credential reuse