The online travel platform said that customers' financial information was not accessed from its systems.