Cybersecurity breach may have exposed caravan park guests’ booking information

Published: October 29, 2026

Grey nomads and others who may have booked into caravan parks run by some major chains are being warned that their personal information may have been exposed following a cybersecurity breach.

Australian booking management software provider RMS Cloud, which provides cloud-based property management and booking systems to more than 6,000 hotels, holiday parks and serviced apartments around the world – says it identified unauthorised access to a limited part of its environment.

“While our investigation is ongoing, current findings indicate a subset of guest booking information held in our system is involved, including guest contact information and booking details,” it said. “Credit card and payment details are not involved.”

Major holiday park operators, including Reflections, BIG4 and G’day Parks, are understood to be among those who have been affected.

RMS says is also aware of phishing communications sent by an unknown entity claiming to be RMS or one of RMS’ clients.  The communications quote booking information, request confirmation of payment details, and may be received via email, text message or WhatsApp.

“We are treating this matter with the utmost urgency, and recognise the concern and disruption this has caused our customers and their guests,” RMS said. “Our team is working around the clock, supported by forensic, cyber and legal specialists, to investigate, support affected customers and understand the full extent of the impact.”

It says travellers should remain vigilant as phishing and scam communications become increasingly sophisticated.

In a statement, Reflections said it had contacted guests to alert them of the phishing attempt, which claims that their booking payment has failed, and asks them to update payment details or their booking will be cancelled.

“Any guest who has received this suspicious email, SMS or WhatsApp message is advised to ignore it and delete it immediately,” it said.

RMS says anyone who receives suspicious communication should consider the following advice:

  • Contact the accommodation provider directly before acting, using contact details from confirmed, official sources (website or original booking confirmation)
  • Do not click any link contained within and delete the message.
  • If you clicked a link, run an antivirus scan on your device and change your passwords.
  • If you provided any payment details, contact your financial institution immediately and follow their advice.

# Have you received any suspicious potential phishing emails following this cybersecurity breach? Comment below.


Are you a Grey Nomad member yet? Click here to find out about the discounts, competitions and other benefits on offer.


0 Comments
Oldest
Newest
Inline Feedbacks
View all comments
ADVERTISEMENT

Subscribe To Our Newsletter

0
    0
    Your Cart
    Your cart is emptyReturn to Shop