RMS data breach fuels phishing campaign targeting Australian hotel guests

Traders Union
All News
Business & Wealth
Companies
RMS data breach targets hotels

Highlights

RMS, a booking software provider used by more than 6,000 accommodation businesses globally, suffered a data breach exposing guest names, contact details, and reservation information.
Phishing campaigns leveraging the stolen data are targeting Australian hotel guests with credible emails and texts requesting payment detail updates under false pretenses.
Affected operators include Federal Group (Wrest Point Casino, Country Club), ALH Hotels, and Discovery Parks, with broader industry warnings and direct guest notifications underway.

Booking data exposed across hotel networks

As reported by ABC News, the incident affects multiple accommodation providers in Tasmania and across Australia after guest names, contact details and booking information were stolen in a hack of RMS, a booking software provider used widely in the hospitality sector.

The fraudulent emails appear highly credible, using genuine reservation details including booking numbers, room type and correct check-in and check-out dates. In one example cited, the message tells the guest that the card used for the booking has been blocked by the issuing bank and asks them to update and verify payment details to avoid cancellation.

RMS says it is investigating the breach and that credit card and other payment details have not been accessed. Chief executive Adam Seskis says in a statement that scams are becoming increasingly sophisticated, while the company advises that suspicious messages are also being sent by text and WhatsApp.

RMS is used by several Tasmanian accommodation operators, including Federal Group, which runs Wrest Point Casino and Country Club. Other affected groups include ALH Hotels, operator of Nightcap and Nightelier accommodation, and Discovery Parks, which hosts a resort at Cradle Mountain.

Cyber risks widen for travel operators

According to the company's website, RMS's booking system is used by more than 6,000 hotels, holiday parks and serviced apartments worldwide, highlighting the potential scale of disruption for accommodation businesses and their customers. Many providers, including Wrest Point, have contacted guests directly to explain the scam and outline how genuine communication from the hotel would occur.

University of Tasmania adjunct professor and cybersecurity expert Joel Scanlan says breaches now occur across "basically all areas," with travel being one example. He urges anyone who receives a suspicious message to delete it, avoid clicking any links and avoid forwarding it, while customers who have already provided payment details should contact their financial institution immediately.

In our earlier coverage of the surge in cybersecurity funding, we noted that investment remained resilient as larger late-stage rounds pushed total capital higher even while the number of deals declined. The piece highlighted strong investor focus on AI-driven security and identity protection, alongside a wave of big-ticket acquisitions that underscored growing urgency around fraud prevention and AI-era cyber risk.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.