Reservation Security Notice

12 November 2026

We can confirm a data security incident involving guest reservation details. We have identified that an access credential used by one of our third-party technology partners has been misused by an unauthorised party to access guest reservation information. The information was used to target guests falsely claiming to represent our hotels and request payments.

As soon as we became aware, we revoked the credential, closed the access route, and began an investigation with the support of an independent cybersecurity specialist.

Our investigation has confirmed that the exposed data is limited to guest names, booking details (stay dates, hotel name, and itinerary numbers), and contact information (mobile numbers and email addresses). We cannot confirm, nor can we exclude, that sensitive Personally Identifiable Information (PII) such as passport or visa numbers may have been affected. No payment card information was involved - card details are not stored in the affected system and were not accessed. 

We have blocked the unauthorised access and are working closely with the third-party partner involved to fortify our shared data ecosystem further. Additionally, we have notified the relevant data protection authorities as required.

We sincerely apologize for causing concern and are doing everything we can to support impacted guests.

For further information, please contact the relevant hotel directly using the contact details, as listed on our official website.