RMS Cloud booking data leak fuels phishing against Australian guests
Unauthorised access to some environments of accommodation booking management provider RMS Cloud led to the leak of Australian guests' names, contact details and booking information. Using real booking numbers and stay dates, attackers sent emails, texts and WhatsApp messages warning of booking cancellation and demanding payment or card details. RMS blocked the unauthorised activity, replaced integration credentials and pursued the removal of fraudulent sites. It said card and payment information was not among the data affected.
Key facts
- Affected organisation
- RMS Cloud
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Names, contact details and booking information of Australian guests
- Cause / method
- Real booking data stolen through unauthorised access to booking management environments was abused for phishing
- Location
- Australia
If your data was exposed
Exposed dataNameUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Phishing using real booking information was confirmed, and RMS moved to replace integration credentials and remove fraudulent sites.
- RMS Cloud confirmed unauthorised access to some environments and harm to guest contact and booking information, and said payment information was not included.
- Payment-inducing phishing against Australian guests continued, and RMS said it had blocked the unauthorised activity.
7 related reports
- Aussie holiday park operators compromised by RMS Cloud third-party breach
- Hotel Booking Data Breach Triggers Targeted Phishing Scams Across Australia
- Cybersecurity breach may have exposed caravan park guests’ booking information
- RMS hack sees 'convincing' phishing scam emails using real hotel booking numbers sent to customers
- Cybersecurity Incident Involving Third-Party Technology Provider
- Scammers target Kimberley travellers after international hotel booking data breach
- Data Breach Triggers Fake Hotel Booking Messages Targeting Australian Travellers
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.