Australian holiday park chains warn travelers of phishing scams after RMS Cloud breach
Major Australian holiday park operators have alerted guests that scammers are sending fake payment requests after a breach of the RMS Cloud booking system.
Several leading Australian holiday park groups have issued warnings after a cybersecurity breach at RMS Cloud, the third-party booking platform used by many parks. BIG4, Reflections Holidays and Summerstar Tourist Parks confirmed that scammers are using genuine reservation details to send fraudulent emails, texts and WhatsApp messages requesting credit-card or payment information. The operators urge travelers to avoid clicking suspicious links and to refrain from providing payment details.
Cherie Midson, who runs a park in East Gippsland, said guests began contacting her after receiving the fake messages, prompting a report to the government’s Scamwatch service. Cyber-security specialist Professor Daswin de Silva explained that travel data is especially attractive to fraudsters. Scamwatch, part of the ACCC, recorded over 13,000 phishing reports in the first quarter of 2026.
Why it matters
Travelers' personal and payment data are at risk, and the warnings aim to prevent financial loss and protect holiday park reputations.
In this story
