Woman keeps getting Trip.com emails meant for other user with same name, personal info also visible一名女子不断收到来自 Trip.com 的邮件，这些邮件本应发给另一位同名用户，邮件中甚至显示了她的个人信息。
A woman was frustrated after repeatedly receiving emails from Trip.com despite not being a user of the online travel agency.Stomper Felicia said she does not have a Trip.com account and that the confirmation emails — mainly involving hotel bookings — are meant for a user with the same first name as her.“I am not this Felicia L but I keep...
A woman was frustrated after repeatedly receiving emails from Trip.com despite not being a user of the online travel agency.
Stomper Felicia said she does not have a Trip.com account and that the confirmation emails — mainly involving hotel bookings — are meant for a user with the same first name as her.
“I am not this Felicia L but I keep receiving her bookings in my email,” she lamented.
“I can see the guests’ names, the hotel, the price, and their credit card number from the bookings. It’s in the emails and attachments, and all exposed to me.”
Stomper questions why emails are sent to addresses that haven’t been validated
While the Stomper is unable to recall when exactly this began, her patience reached a tipping point when she recently received five such emails in one day. In the first two weeks of October, Felicia received more than 20 emails from Trip.com.
This led her to wonder why email addresses are purportedly not validated before Trip.com starts sending out emails to said addresses.
“Most of the time, I just block the incoming mail,” said Felicia. “But one day, I received like five emails and decided to write back.”
In her reply, the Stomper requested that Trip.com “change their system” and make it mandatory for users to verify their email addresses “before starting to spam our inboxes”.
However, she was dissatisfied with the company’s response.
“They told me to change my password or just unsubscribe from their emails, which is not the point,” Felicia said, adding that no action was apparently taken.
By sharing her experience, the Stomper aims to raise awareness and hopes all online websites can make email validation compulsory.
“Otherwise, whichever donkey can just enter someone else’s email address, and that person will be spammed with all the purchases, bookings, and online receipts,” she said.
Trip.com apologises, says no data breach
In response to a Stomp query, a spokesperson for Trip.com said there was no data breach.
“Following a review, we have found that a user had entered an incorrect email address during the booking process,” said the spokesperson. “As a result, booking notifications were sent to the incorrect email address.”
This incorrect email address has since been removed from the relevant bookings. Trip.com has also contacted the Stomper to apologise for the “unexpected emails”.
The spokesperson added: “We have assured her that this was not an instance of any data breach but an email entry error by another user.”
'I am not Felicia L'
Felicia has since confirmed that Trip.com did apologise to her — but addressed her by the wrong name.
“They called me Felicia L and I replied that I am not Felicia L,” she said. “They asked me for my preferred name, but I am not going to give it to them and nor am I a user of theirs.”
The Stomper also took issue with Trip.com’s response once again: “They only reported their findings but did not mention anything about changing their system regarding email verification. They are not resolving the core problem.”
Felicia told Stomp on Oct 30 that she has since blocked Trip.com from sending her further emails.
This article was first published in Stomp . Permission required for reproduction.
一名女子在并非 Trip.com 用户的情况下，却反复收到该旅行社的电子邮件，这让她感到很沮丧。
用户 Felicia 表示她没有 Trip.com 帐户，而且确认电子邮件（主要涉及酒店预订）是发给与她同名的用户的。
“我不是 Felicia L，但我的邮箱里却不断收到她的预订信息，”她抱怨道。
“我可以从预订信息中看到客人的姓名、酒店、价格和信用卡号。这些信息都在电子邮件和附件中，我都能看到。”
Stomper质疑为何会向未经验证的地址发送电子邮件。
虽然这位“跺脚者”记不清具体是从什么时候开始的，但她最近一天之内收到五封这样的邮件后，终于忍无可忍了。10月的前两周，菲利西亚收到了超过20封来自Trip.com的邮件。
这让她不禁疑惑，为什么 Trip.com 在向用户邮箱地址发送邮件之前，似乎并没有对这些地址进行验证。
“大多数时候，我都会屏蔽收到的邮件，”费利西亚说。“但有一天，我收到了五封邮件，于是决定回复一下。”
Stomper 在回复中要求 Trip.com “改变他们的系统”，强制用户在“开始向我们的收件箱发送垃圾邮件之前”验证他们的电子邮件地址。
然而，她对公司的答复并不满意。
“他们让我更改密码或取消订阅他们的电子邮件，但这并不是重点，”费利西亚说，并补充说，显然没有任何人采取任何行动。
通过分享自己的经历，这位 Stomper 旨在提高人们的意识，并希望所有在线网站都能强制要求进行电子邮件验证。
“否则，任何一个人只要输入别人的电子邮件地址，那个人就会收到大量的购买记录、预订信息和在线收据，”她说。
Trip.com就数据泄露事件道歉，称未发生数据泄露。
针对 Stomp 的询问，携程发言人表示，没有发生数据泄露事件。
发言人表示：“经核实，我们发现有用户在预订过程中输入了错误的电子邮件地址。因此，预订通知被发送到了错误的电子邮件地址。”
该错误邮箱地址已从相关预订记录中删除。Trip.com 也已联系 Stomper 就“意外邮件”致歉。
发言人补充道：“我们已向她保证，这并非数据泄露事件，而是另一位用户的电子邮件输入错误。”
“我不是菲利西亚·L”
费利西亚后来证实，Trip.com确实向她道了歉，但叫错了她的名字。
“他们叫我菲利西亚·L，我回答说我不是菲利西亚·L，”她说。“他们问我想要用的名字是什么，但我不会告诉他们，我也不会用他们的服务。”
The Stomper 再次对 Trip.com 的回应提出质疑：“他们只是公布了调查结果，但并未提及要更改电子邮件验证系统。他们并没有解决根本问题。”
费利西亚于 10 月 30 日告诉 Stomp，她已经屏蔽了 Trip.com 向她发送的邮件。
本文最初发表于 Stomp 网站。转载需获得许可。