If you are within the U.S. file a report with the FBI Internet Crimes Division at https://www.ic3.gov and with the FTC identity theft department at https://www.identitytheft.gov. You should also file a report with your local law enforcement agency. My account was compromised as well and AirBnB has denied wrong doing, complacency, or intrusion. We must make them acknowledge these incidents in order to protect other consumers.
Description of Incident Filed with FBI Internet Crime Division - Redacted
"
On 18 Aug 2019 at approximately 3:31 pm CST my email account, ---------@gmail.com, was spam attacked. The attack included over 2000 spam emails in the span of less than 5 hours in which over 500 that made it through Google's spam filter into my inbox. At about 4:50 CST I noticed the influx of spam mail and immediately knew that at least one of my accounts had been compromised. Having a degree in Cyber Security and I knew the procedures to take. I immediately began an investigation from the bottom up and found an unauthorized booking from my AirBnB account. The booking was for 18 Aug through 22 Aug 2019 in Los Angeles, CA. I immediately called my financial institution and cancelled my card and notified them of the unauthorized charge. I then contacted AirBnB and notified them about the unauthorized booking on my account. AirBnB escalated the complaint. I then followed protocol and changed all passwords on accounts associated with initial attack. I then proceeded to investigate all accounts for unauthorized activity and at this time I found none. Upon further investigation I found that there was 2 attempts to request a booking in Moskva, Russia for the same location for 13 Aug 2019. The bookings where for different time periods but for same day. Both attempts were failed due to "Did Not Pass Verification". I never recieved an email about the failed attempts from AirBnB. I then decided to message the host and inform them that I was a victim of a cyber attack. I informed them that I did not request the booking and that I was filing a report with the FBI cyber crimes division and the FTC. I then continued to further investigate the over 2000 emails sent for any other indications of compromise. I then went back to investigate the booking information on AirBnB and could no longer find the location that was booked without my authorization. I also could not find the location that the attempt was made in Moskva, Russia. I did capture a screen shot of the person that hosted the location in Los Angeles before I was no longer able to view his posting.
AirBnB responded to my complaint, "Hello -----,
My name is ---- from the Airbnb Trust team. I've reviewed your account activity, and confirmed that there has been no unauthorized access to your Airbnb account
Sometimes seemingly unauthorized access can come from another person (usually a close friend, family member or colleague) using a shared device from which your account was logged in previously.
If you think someone else knows your password, change your password immediately: https://www.airbnb.com/users/security
For tips on keeping your account secure, visit our Help Center: https://www.airbnb.com/support/topic/357
Thanks,
----
www.airbnb.com/help".
I responded, "This is wrong. My AirBnB account is only accessed through my personal computer or phone that no one other than my wife and myself have access to. I have not even logged into AirBnB until today after the unauthorized booking was created. I can tell you that it was a targeted attack. They used a spam attack on my email address associated with my account. The attack included over 2000 spam emails in the the span of less than 5 hours. Over 500 of those spam emails made it past Google's spam filter into my inbox. This was an attempt to cover the illegal activity. If I had not recieved a degree in Cybersecurity I would have easily overlooked it and it would not have been discovered until the charge cleared my credit card account. The Spam attack occurred at approximately 2:31pm CST which looks like it was around the time the unauthorized booking occurred. A message was also sent to the host around 2:39pm. To that I can say that I was neither on my phone or computer at the time. I believe further investigation is warranted. I am in the process of conducting my own personal investigation at which time will be completed tonight. I will then file a report with the FBI Cyber crimes division and the FTC. Also to note that there was another two apparent attempts to book a stay at a home in Moskva, Russia. I never had or have plans to visit Russia. I also have no friends, family, or colleagues associated with Russia. I believe that a further investigation is warranted. Please investigate further so that this does not happen again to others." Edited response, "A message was also sent to the host around 2:29pm."
During the time of the attack I or no one in the home had access to my AirBnB account."
We can only accomplish something if we report it to proper authorities.
