Orbitz says hacker stole two years' worth of customer data

The travel booking site said about 880,000 payment cards were affected.