Best Western hack and data leak phishing emails "Your booking is currently being held for you, but it still requires a quick confirmation"
There is an active phishing campaign targeting Best Western customers using stolen booking data. Victims receive WhatsApp messages containing their real name, booking reference, hotel, and dates. I have: Contacted the hotel chain for further clarification and to find out why they are still leaking data a month or two after the original breach. UPDATE 1st April 2026: Their unnamed data protection DPO@bwhhotels.co.uk has replied saying "This incident has unfortunately affected a number of organisations across the hospitality sector." and have failed to provide me with any information about how the information was compramised, or why they're still leaking data months after the breach. I've chased them up on this. I've also asked whether this has been referred to the ICO. Reported the business number to WhatsApp Reported the malware to CloudFlare. Here’s what the scam looks like and how to protect yourself. Shortly after making a booking I received a WhatsApp messag...