The office of Pennsylvania attorney general Josh Shapiro has reached a settlement with travel websites Orbitz and Expedia following an investigation into a 2018 data breach. The cybersecurity incident, disclosed by Orbitz in March 2018, may have exposed the personal data of 20,755 Pennsylvanian customers.