CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

BWH Hotels reports prolonged reservation system compromise with potential guest data exposure

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

A hospitality group operating over 4,000 hotels worldwide disclosed a security incident where threat actors maintained unauthorized access to a guest reservation web application for approximately six months. The intrusion was detected on April 22, 2026, with evidence showing initial compromise on October 14, 2025. Attackers accessed guest reservation data including names, email addresses, phone numbers, and reservation details, though payment information was not stored in the affected system. The application was taken offline immediately upon discovery, and an external investigation was initiated. While the scope of affected individuals remains undisclosed, the hotel group has warned that stolen data may be used for subsequent phishing and scam campaigns.

Timeline

  1. 12.05.2026 17:30 1 articles · 1h ago

    Six-month unauthorized access to BWH Hotels reservation system disclosed

    Threat actors gained and maintained unauthorized access to a BWH Hotels reservation web application from October 14, 2025, until discovery on April 22, 2026. The breach exposed guest reservation data including names, email addresses, phone numbers, and reservation details, while payment information remained unaffected. The compromised application was taken offline immediately, and an external investigation was initiated.

    Show sources
    Open in new tab

Information Snippets