Anyone who booked travel in 2016 and 2017 using Expedia-owned Orbitz needs to be concerned. The company has announced that hundreds of thousands of people who used their credit cards to book travel using the Orbitz site might have had their credit card information hacked.

And it’s not just people who booked directly through Orbitz —the company said that people who used companies Orbitz services could also be included. Those companies include anyone who used American Express ( book travel.

What might have been stolen from consumers? Hackers might have stolen consumers’ names, their phone numbers, addresses and dates of birth — any and all of which can be used by thieves for an array of illegal scams.

What can consumers do? Keep vigilant about all of their financial information —that means credit card statements, bank statements and any other kind of financial information.