Cyber incident hits Discovery Parks via RMS software breach

A popular Aussie holiday park group has issued an urgent warning to customers following a data security breach, which led to fraudulent emails and messages being sent.

Discovery Parks has been hit by a cyber security incident - with customers being targeted by fraudulent emails and WhatsApp messages.

Customers were told by the Australian holiday company, which runs multiple holiday parks and resorts across Australia, that guests received fraudulent emails and WhatsApp messages relating to accommodation bookings.

The messages were designed to impersonate legitimate bookings and payments with links to an external website that requested payment or personal information.

“Based on our investigation to date, there is no evidence that Discovery Parks systems, infrastructure, or customer databases have been compromised,” an email to customers stated.

A spokesman told customers the phishing activity was linked to a security incident impacting software provider RMS that supports bookings and reservation management for accommodation businesses.

Discovery Parks is working with RMS to understand what happened and monitor further impacts.

Customers were told to their bank if they clicked on a link in the phishing message and provided bank details and update their passwords.

“You must immediately your bank, follow their advice, and monitor for any unusual activity,” a spokesman said.

“RMS is continuing to investigate this matter and we will update you again in the event of any further developments.”