Property management and accommodation software provider RMS Cloud identified unauthorized access to a limited part of its digital environment, impacting major operators including Reflections, BIG4, and G’day Parks. The security incident exposed sensitive guest details, including full names, direct contact phone numbers, email addresses, and specific reservation parameters. Cybercriminals are exploiting the stolen data to launch highly convincing WhatsApp messages, text messages, and automated phone calls that quote accurate booking and travel dates. The fraudulent messages urge recipients to click malicious external links to verify card details or clear pending payments under the threat of immediate booking cancellations. RMS Cloud issued new integration credentials to its partners, waived fees for customer notification messaging, and urged travelers to bypass links and verify communications directly with properties.

Full report : RMS Cloud platform breach exposes guest accommodation and booking data, fueling targeted WhatsApp and text message fraud across Australia.