Potential compromise of 800k client details from a legacy website of US travel firm Orbits.