Skip to content
RMS Cloud Breach Exposes Guests to Phishing Scams

RMS Cloud Breach Exposes Guests to Phishing Scams

First seen 27 Oct 2026, 09:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 11:12 UTC
  • •RMS Cloud's breach has led to phishing scams targeting holiday park guests.
  • •No payment card information was compromised, but guest data was used in scams.
  • •Affected operators are warning customers and advising them to monitor for unusual activity.

A cybersecurity breach at RMS Cloud, a booking software provider, has led to multiple Australian holiday park operators being targeted by scammers using real guest booking data to send phishing messages. Affected operators include BIG4, Discovery Parks, Reflections Holidays, and Summerstar Tourist Parks. The phishing messages, sent via WhatsApp, SMS, and email, impersonate legitimate bookings and request payment details. RMS Cloud confirmed that no payment card information was exposed, but the incident has raised concerns about reputational damage and regulatory implications for the affected businesses. Operators are advising guests not to click on suspicious links and to report any fraudulent messages. RMS is currently investigating the breach and working to contain the situation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-27
Breach disclosed
RMS Cloud reported a cybersecurity incident affecting multiple holiday park operators, leading to phishing messages targeting guests.
Insurancebusinessonline.Au
2026-10-27
Discovery Parks issues warning
Discovery Parks alerted customers about fraudulent emails and messages linked to the RMS breach, confirming their systems were not compromised.
Theaustralian.Au
2026-10-27
Affected operators warn guests
BIG4 and other holiday park operators warned guests about receiving fraudulent messages following the RMS breach.
www.abc.net.au

More articles in this cluster (3)

Following this threat?

Track BIG4 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 3

Common questions

What data was compromised?
While no payment card information was exposed, real guest booking details were used in phishing messages.
How should guests respond to phishing attempts?
Guests should avoid clicking on links in suspicious messages and report any fraudulent communications to their holiday park.
Are the affected operators liable for this breach?
The holiday parks may face reputational harm and regulatory obligations, but they did not experience a direct breach of their systems.