Breaches and incidents
TCS Camping (Switzerland) / Camping.care reservation software: booking data used in fraudulent payment requests, about 15,000 guests warned
Per drohnen.de, TCS published a notice on 23 Oct 2026 (updated 26 Oct) that an external reservation software provider, reported by SRF, Blick and Watson to...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- Per drohnen.de, TCS published a notice on 23 Oct 2026 (updated 26 Oct) that an external reservation software provider, reported by SRF, Blick and Watson to be Camping.care, was attacked; fraudsters used guests’ name, phone number, campsite and reservation number to request payments or link confirmations. TCS warned around 15,000 guests as a precaution.
- Root cause: TCS named no cause; per TCS the provider suspects booking data was stolen. The article notes a reported PHP vulnerability link is unconfirmed.
- No attacker named.
- TCS said the gap has been closed and bookings are possible again; the software does not store card data and IBANs were not affected, per TCS.