I agree this is a data breach incident, not good at all.
It might be a "human error" of an hotline agent rather than an IT glitch which would be even more scandalous.
I recently noticed a similar error on the website of the Spanish "Catalonia" hotel group where I could retrieve a mysterious hotel booking in my profile which belonged to a Spanish lady.