Last updated: 11 November 2026
Recent unauthorised activity within our platform
We recently detected unauthorised activity within the Bookeasy platform. Following a security alert, we were able to take immediate containment action. This included engaging cyber experts to assist with our investigation and provide advice.
For some of our partners, it appears that some personal and booking information of their customers has been or may have been accessed. Based on the status of our ongoing investigation, we have not identified any access to credit card details.
Who is impacted?
Partners or operators who we know are or may be impacted will be contacted by us directly. We’re providing them with support and information to assist with notifying their customers.
If you have not heard from us directly, it means we do not currently have any direct evidence that suggests your customer data has been accessed. If we identify new relevant information that changes our assessment, we will provide a further update.
What information was accessed?
Some personal information of our customers (such as name, address, email address or phone number) and booking information has or may have been accessed. Importantly, based on the status of our ongoing investigation, we have currently not identified any access to credit card details.
The nature of these incidents may mean that gaining certainty over what was accessed is not always possible. We want to be transparent with all our partners about what we know and provide information to support your customers.
What happens next?
In recent times there has been an increase in scam attempts targeting the travel industry. We recommend that our partners who may be impacted alert customers who have upcoming bookings to be aware of possible suspicious emails, WhatsApp or text messages.
While there is no evidence of targeting past bookings, out of an abundance of caution, we also suggest that our partners who may have been impacted consider contacting customers who have placed bookings in the past 12 months to provide the same alert.
What should customers do?
In the event any customer receives suspicious or unexpected communications about a booking, they should consider the following advice:
How did this happen?
There has recently been an increase in activity of this nature targeting the travel industry. Bookeasy takes cyber security seriously and has obtained market leading certifications, which are independently audited. We remain committed to maintaining strong security systems with the guidance of external experts.
What security certification does Bookeasy hold?
Bookeasy is ISO 27001:2022 and PCI-DSS v4 certified, independently audited, and fully compliant.
How can I tell if information for any of my customers was accessed?
Partners or operators who we know are or may be impacted will be contacted by us directly. We’re providing them with support and information to assist with notifying their customers.
If you have not heard from us directly, it means we do not currently have any direct evidence that suggests your customer data has been accessed. If we identify new relevant information that changes our assessment, we will provide a further update.
Is the issue resolved?
Yes. We are confident that our containment efforts have resolved this issue and have been working with an external third-party expert to validate those efforts.
When did you detect this issue?
We first detected this issue in early November and immediately commenced an investigation. Investigations of this nature can take time, and we wanted to ensure that we had accurate information about what occurred to communicate with partners, operators and customers.
Have you identified scam activity in connection with this incident?
We are aware of some suspicious activity that may relate to this incident, including some customers receiving phishing messages via WhatsApp. If a customer receives a suspicious communication, we recommend that they follow the guidance set out on this website.
Is Bookeasy continuing to operate as normal?
Yes. We have been working with an external third-party expert to validate our containment efforts and continuing to operate.
Where do I access the template for communication to customers?
We recognise that any incident involving customer information is sensitive and can create additional work. Partners who would like to advise their customers can use the template on this web page.
Updates and ongoing support
If we identify new relevant information that changes our assessment of this matter, we will provide a further update. Supporting our valued partners and operators remains our priority. Please send any inquiries through to contact@bookeasy.com and we will endeavor to provide as much clarity as we are able.
Why didn’t you share an update sooner?
Given we had confidence the system is secure, we have been working with an external third-party expert to validate our containment efforts and investigate what data was impacted. We wanted to ensure that we had accurate information about what occurred to communicate with our partners.
Subject: Important security information from our booking partner
Dear [NAME]
We are contacting you regarding an update we have had from Bookeasy, the technology partner that provides the booking platform used by [DESTINATION].
The third-party provider recently detected unauthorised activity within its platform. Following a security alert, they inform us that immediate containment action was taken, including engaging cyber experts to assist with their ongoing investigation.
As part of this, the booking platform identified that some personal information of our customers (such as name, address, email address or phone number) and booking information has or may have been accessed. Importantly, their investigation has currently not identified any access to credit card details.
There has recently been an increase in scam attempts targeting the travel industry and unfortunately the nature of these incidents may mean that gaining certainty about what information was accessed is not always possible.
The booking platform has recommended we advise our customers to be on alert for potential scam activity. If you receive a suspicious or unexpected communication such as an email or text message about a booking, we encourage you to consider the following advice:
· Always contact us directly before acting, using contact details from confirmed official sources
· Do not click on any link contained within the message and delete the message immediately
· If you clicked a link, run an antivirus scan on your device and change your passwords
· If you provided any payment details, contact your financial institution immediately and follow their advice.
For updated information on this matter, please visit here: link
Regards,