With the busy travel season approaching, a data breach at Booking.com is leading to warnings about phishing scams known as "reservation hijacking."