Data protection officer: Criminals steal booking data - what holidaymakers can do

Hanover. In successful cyber attacks on national booking service providers, guest data was leaked. This was announced by Denis Lehmkemper, State Commissioner for Data Protection in Lower Saxony. Criminals use the data to send deceptively genuine phishing messages.

“Be suspicious if you are asked via email or WhatsApp to add credit card details for your booking or to pay for an overnight stay via a link,” warned Lehmkemper.

The senders had the real booking information, which made the messages appear authentic. Guests should not click on the links and, if in doubt, should ask the hotel, campsite or holiday apartment owner directly - ideally via the contact options listed on the official website.

According to the information, the background is several IT security incidents “at larger technical service providers, particularly for booking management, which are used by hotels, campsites and other accommodation providers nationwide,” it says.