Breaches and incidents
RMS Cloud (with Federal Group and other accommodation operators): booking data stolen and used for targeted payment phishing
Guest names, contact details and booking information were stolen in a hack of booking provider RMS, per ABC.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Guest names, contact details and booking information were stolen in a hack of booking provider RMS, per ABC; guests then received emails, texts and WhatsApp messages quoting real booking numbers, room types and dates and asking them to update card details. RMS says credit card and payment details were not accessed.
- Root cause: not disclosed; Cyber Daily reports the booking system “appears to have been compromised by a cyber security incident.”
- No attacker named; RMS said it is “actively investigating the source of these communications” with forensic specialists (ABC).
- Affected operators named by ABC include Federal Group (Wrest Point Casino, Country Club), ALH Hotels and Discovery Parks in Tasmania, with BIG4, Reflections and G’day Parks understood to be affected; RMS’s system is used by more than 6,000 properties. Per Cyber Daily, RMS began issuing new credentials to its integration partners the day after the scam was identified, and CEO Adam Seskis apologised (ABC).