The world's biggest hotel booking site Booking.com was breached by an American acting on behalf of US intelligence in 2016, who stole details of thousands of reservations in the Middle East, but the site kept it quiet, a new book authored by three Dutch journalists claims.