Overview
- Bookeasy detected unauthorised activity in early November and says it immediately began containment, engaged external cyber specialists and started notifying partner agencies.
- On Thursday Queensland, Victoria and South Australia park agencies and a Western Australian visitor operator told customers the platform breach may have exposed names, contact details and booking information.
- Parks Victoria has temporarily suspended new campsite bookings as a precaution while existing reservations remain valid but cannot be changed at present.
- Agencies and Bookeasy say payments are processed through separate systems and no access to credit card details has been identified so far, with forensic work ongoing to confirm the full scope.
- Customers are being urged to ignore unexpected emails, texts or WhatsApp messages, not to click links or give personal or payment information, and to run security checks if they suspect compromise; the timing before the summer peak raises the risk of scams and wider disruption.