{
  "id": 16711510,
  "title": "Scammers target major holiday parks across Australia in cybersecurity breach",
  "url": "https://urgent.news/2026/10/27/scammers-target-major-holiday-parks-across-australia-in-cybersecurity",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-27T05:24:30.000Z",
  "source": {
    "name": "ABC News AU",
    "slug": "abc-news-au",
    "url": "https://www.abc.net.au/news/2026-10-27/rms-holiday-booking-software-hacked/107315194"
  },
  "original_language": "en",
  "account": "Several major holiday park operators in Australia are warning guests about fraudulent messages following a cybersecurity breach linked to a third-party booking platform. Scammers are leveraging booking details to send fake payment requests to travellers. Travelers are advised not to click suspicious links or share payment information. Australian tourists are being informed that their personal data might have been exposed due to this breach. Major holiday park operators, such as Reflections, BIG4, and G day Parks, are reported to have been affected through the Australian booking management software provider RMS Cloud. RMS Cloud provides cloud-based property management and booking systems to over 6,000 hotels, holiday parks, and serviced apartments globally. The Australian Broadcasting Corporation (ABC) has reached out to the company for a response. BIG4, one of Australia's largest holiday park operators, has reported that guests have been targeted by scammers after a breach in a third-party booking platform. The company has contacted parks within its network and provided preliminary information and advice to customers, including not clicking on suspicious links or providing payment information. Reflections Holidays, which operates caravan holiday parks in New South Wales, has informed guests about the scam, warning them not to click on links or share payment details. Cherie Midson, who manages a holiday park in Victoria's East Gippsland, stated that concerned guests started contacting the business after receiving the fraudulent messages. The messages, allegedly sent by RMS, claimed that booking payments had failed. Ms. Midson reported the incident to the federal government's Scamwatch site, expressing concern for both the business and its guests. Summerstar Tourist Parks, operating numerous caravan parks in Western Australia, has also warned guests about the cybersecurity breach on social media. The park has received notification of a breach from RMS, its external booking system provider, and is alerting guests to fraudulent emails and WhatsApp messages that appear to be from the park, requesting verification of booking details. This incident is not the first targeting travelers; earlier this year, the ABC reported that Booking.com guests were targeted in a phishing scam involving fake hotel messages on WhatsApp and emails, with requests for personal details. Cybersecurity expert Professor Daswin de Silva highlighted that travel data is highly valuable due to its detailed information about a traveler's identity, making them appealing targets for cybercriminals. Scamwatch, the Australian Competition and Consumer Commission's scam reporting service, has recorded over 13,000 reports of phishing scams in the first three months of 2026.",
  "summary": "Australian travellers are being warned their personal information may have been exposed following a cybersecurity breach involving an accommodation software company.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}