RMS Cloud breach fuels targeted phishing of Australian holiday park guests

RMS Cloud, which provides property management and booking systems to more than 6,000 hotels, holiday parks, and serviced apartments worldwide, confirmed it is investigating a cybersecurity breach after scammers began sending phishing messages that use genuine booking details to harvest payment card details. The messages, sent by email, SMS, and WhatsApp from October 26, tell guests their booking payments failed and direct them to fraudulent pages; they carry real names and stay dates, which makes them convincing. Operators including BIG4, Reflections Holidays, G'day Parks, Summerstar, and Hampshire Property Group warned their guests on October 26 and 27.

RMS says no payment card information was exposed from its systems, and the extent of the breach is not yet known, so no affected count can be stated. Guests are advised to ignore payment requests arriving by message and to contact their park directly through its official website or their original booking confirmation.

Sources: Insurance Business Australia; ABC News via Zot News; Hampshire Property Group guest notice