Data Breach Triggers Fake Hotel Booking Messages Targeting Australian Travellers
By Chloe · Published 03 Nov 2026 · Updated 03 Nov 2026
Broome, WA · Western Australia News
Safety note: Admin approval is an initial review, not a guarantee that every detail is correct. Check important or urgent claims with official sources and report anything inaccurate or unsafe.
Source and credit: Contributor's own report
Data Breach Triggers Fake Hotel Booking Messages Targeting Australian Travellers - Broome, WA
Smart summary
Holidaymakers in Western Australia's Kimberley region have received convincing phishing messages containing genuine accommodation booking details after hackers accessed information held by a third-party hotel reservat...
Travellers planning holidays in Western Australia’s Kimberley region have been targeted by phishing scams following a data breach involving RMS, a third-party accommodation booking provider.
The incident has raised concerns because the fraudulent messages contained genuine information about customers’ hotel reservations, making them more difficult to identify as scams.
One affected traveller, Sydney resident Cameron Craig, received a Whats App message about his upcoming accommodation booking at Cable Beach Club in Broome. The message included his full name and the correct dates of his planned stay.
It asked him to provide payment details through a link and warned that his reservation could be cancelled if he did not complete the requested payment.
Although Craig considered himself familiar with online scams, the accurate booking information made the message appear genuine. He clicked the link and entered some credit card information, but the session timed out.
He later noticed warning signs, including the international phone number used to send the message and a reservation code that did not match his actual booking. He alerted the resort, which subsequently notified guests about the suspicious communications.
Other accommodation businesses in the Kimberley have also received reports from customers. Kimberley Accommodation Group, which uses RMS Cloud for its reservation services, said guests had reported messages asking them to confirm card details or make payments using information connected to their bookings.
The company said it could not yet confirm how many customers had been affected or whether guests had suffered financial losses.
RMS confirmed that unauthorised activity within its systems had been contained on 2 November. The company said investigations were continuing to establish the full extent and impact of the incident. Its chief executive also confirmed that credit card and payment details were not involved in the reported breach.
Cybersecurity experts have warned that criminals are increasingly using personal information to make fraudulent messages more believable. Unlike traditional phishing attempts containing obvious spelling mistakes or generic requests, these messages can use real booking information to create a sense of trust and urgency.
The incident may also affect other accommodation providers and businesses that rely on third-party reservation platforms, including smaller hotels, bed and breakfasts and temporary accommodation services.
Travellers are being advised not to click unexpected payment links or provide financial details through messages claiming to relate to hotel reservations. Customers should contact their accommodation provider directly using contact information from its official website or booking confirmation.
AccommodationBookingInformationMessagesCustomers
Travellers planning holidays in Western Australia’s Kimberley region have been targeted by phishing scams following a data breach involving RMS, a third-party accommodation booking provider.
The incident has raised concerns because the fraudulent messages contained genuine information about customers’ hotel reservations, making them more difficult to identify as scams.
One affected traveller, Sydney resident Cameron Craig, received a Whats App message about his upcoming accommodation booking at Cable Beach Club in Broome. The message included his full name and the correct dates of his planned stay.
It asked him to provide payment details through a link and warned that his reservation could be cancelled if he did not complete the requested payment.
Although Craig considered himself familiar with online scams, the accurate booking information made the message appear genuine. He clicked the link and entered some credit card information, but the session timed out.
He later noticed warning signs, including the international phone number used to send the message and a reservation code that did not match his actual booking. He alerted the resort, which subsequently notified guests about the suspicious communications.
Other accommodation businesses in the Kimberley have also received reports from customers. Kimberley Accommodation Group, which uses RMS Cloud for its reservation services, said guests had reported messages asking them to confirm card details or make payments using information connected to their bookings.
The company said it could not yet confirm how many customers had been affected or whether guests had suffered financial losses.
RMS confirmed that unauthorised activity within its systems had been contained on 2 November. The company said investigations were continuing to establish the full extent and impact of the incident. Its chief executive also confirmed that credit card and payment details were not involved in the reported breach.
Cybersecurity experts have warned that criminals are increasingly using personal information to make fraudulent messages more believable. Unlike traditional phishing attempts containing obvious spelling mistakes or generic requests, these messages can use real booking information to create a sense of trust and urgency.
The incident may also affect other accommodation providers and businesses that rely on third-party reservation platforms, including smaller hotels, bed and breakfasts and temporary accommodation services.
Travellers are being advised not to click unexpected payment links or provide financial details through messages claiming to relate to hotel reservations. Customers should contact their accommodation provider directly using contact information from its official website or booking confirmation.
Police have charged two boys, aged 13 and 15, following investigations into alleged break-ins at a service station and fast-food restaurant in Orange, N...
NSW Police have charged 26 people following a three-day public transport operation targeting drug offences, weapons, anti-social behaviour and outstandi...
A 60-year-old political party volunteer was allegedly attacked with a baseball bat outside his home in Torquay. Police have charged a 37-year-old man, w...
Western Australian Women's Interests Minister Simone McGurk says online threats and abusive messages directed at female politicians remain widespread, d...
A 59-year-old convicted sex offender is scheduled for release in December despite remaining classified as a high-risk offender. The Supreme Court has im...
Around 8,000 customers in Western Australia's coastal city of Albany will need to replace gas appliances with electric alternatives or switch to bottled...
Fremantle's new bridge will open to the public on Sunday, 1 November, replacing the ageing crossing and providing wider shared paths for pedestrians and...
New training technology at Mount Isa TAFE is giving students the opportunity to experience mining, construction and transport machinery before entering...
A fresh warning from Australia’s superannuation regulator has raised concerns about complaints and service problems across the retirement savings industry.
Western Australian Women's Interests Minister Simone McGurk says online threats and abusive messages directed at female politicians remain widespread, d...
A new report has highlighted a growing healthcare funding gap between regional and metropolitan Australia, raising concerns about access to specialist t...
