RMS Cloud - A Booking Platform Breach, Scam Messages with Real Reservation Details, and the Accommodation Providers Left to Warn Their Own Guests

Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!

G'day and welcome to Tech Talks with Kinsoft. Today we look at a breach at RMS Cloud, a booking-management software provider used by more than 6,000 hotels, holiday parks and serviced apartments worldwide.

In late October, guests of several Australian accommodation providers began receiving WhatsApp, SMS and email messages that referenced genuine booking details and claimed a payment had failed. Operators including BIG4 parks, Reflections Holidays and Summerstar Tourist Parks warned guests, and later reports named hotel and pub groups too. RMS says it is investigating, is working with cyber and forensic specialists, and that no payment card information was exposed from RMS.

What we know: names, contact details and booking dates were reportedly accessed, according to one council operator. What we do not know: how the attackers got in, how many guests are affected, or when the breach began. No attacker has been publicly named.

We walk through the timeline, why a "payment failed" message with real details is so convincing, what small and mid-sized operators can learn about supplier risk, and what to do if you have stayed at an affected property.

Visit www.kinsoft.com.au to talk through your security and IT needs.

Sources: ABC News; Cyber Daily; The Standard (Warrnambool); Insurance Business Australia; CISO AI.