BIG4, Reflections guests warned of phishing scam using stolen booking data
A breach of booking software used by holiday parks has exposed guest details. Scammers are sending fake payment demands.
Scammers are targeting guests of major Australian holiday parks BIG4, Reflections and G'day Parks with fake messages. They followed a breach of RMS Cloud, a booking software used by thousands of accommodation providers worldwide.
The fake messages ask guests to click links or share payment details. They use real booking information like names and dates of stay to look genuine.
BIG4 warned guests not to click suspicious links or share payment information. A Victorian holiday park manager said guests started calling after getting fake messages.
Cybersecurity experts say travel data is valuable because it contains identity details and shows financial capacity. The Australian Competition and Consumer Commission's Scamwatch received more than 13,000 phishing reports.
This was in the first three months of 2026.
- More than 6,000 properties worldwide
- RMS Cloud global reach
- BIG4, Reflections, G'day Parks
- Affected operators
Why it mattersTravellers should be alert to fake holiday park messages. Never provide payment details by clicking links in unwanted messages.
AustraliaThousands of Australian holiday park guests may receive scam messages; travellers should not click suspicious links or share payment details.
✓ Claims checked against the source and corrected before publish. checked 2 h ago
Open this story in InSnip →
