@cm @evawolfangel @sveckert Exactly. Last breach I saw mentioned was April 2026, but clearly it's pouring out continously. And - as someone else mentioned - it wasn't necessarily at Booking.com, but could theoretically be anywhere along the path from the end user to the hotel clerk.
And regarding booking directly - I often do, especially if I know and trust the hotel, but sometimes convenience wins. I'm human.