Breaches and incidents
Austrian tourism (Feratel interface partner): guest booking data misused for phishing, 97 Salzburg hotels in 12 tourism associations
Salzburg24 reported on 31 Oct that 97 accommodation businesses in 12 Salzburg tourism associations were compromised after attacks on interfaces of tourism...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- Salzburg24 reported on 31 Oct that 97 accommodation businesses in 12 Salzburg tourism associations were compromised after attacks on interfaces of tourism booking platforms in Salzburg, Tyrol and Styria; names, home addresses, email addresses and travel dates were taken and criminals are using real guest data for targeted phishing. Registration data and card/payment information were reportedly not taken in the original incident; Styria was estimated at about 3,000 affected guests.
- Root cause: per the Innsbruck system provider Feratel, its core system was not directly compromised according to forensic analysis so far; unknown parties obtained the access credentials of an external interface partner (not named).
- No attacker named.
- The gap was reportedly closed immediately and internal and external forensic experts are investigating; the article says investigations run nationwide and authorities and the provider are withholding the list of businesses. The date the Tyrol incident (four tourism associations, per KonBriefing) was first reported could not be established from fetched sources.