Overview
- Late Tuesday guests of multiple Australian holiday-park chains began receiving emails, SMS and WhatsApp messages that quoted genuine booking details and asked for payment or card information.
- RMS Cloud says it is investigating the incident and that guest names, contact details and booking information were accessed while credit card data was not reported as compromised.
- RMS and affected operators have taken containment steps that include pursuing removal of fraudulent websites and contact channels, issuing new integration credentials, and sharing a guest email template for warnings.
- Consumer authorities and businesses reported dozens of complaints with the ACCC logging 62 reports over three days and at least one confirmed financial loss, and customers are being told to ignore links and contact their bank if they shared card details.
- The incident highlights third‑party supply‑chain risk because RMS serves more than 6,000 properties worldwide and travel booking data makes phishing more convincing and effective.