The data breach may include "names, emails, addresses, phone numbers" associated with your booking, the company said.