Oh great, #BestWestern has been #hacked
I just got an email saying the following:
"BWH® Hotels, the parent company for WorldHotels™, Best Western® Hotels & Resorts, and Sure Hotels®, takes the privacy and security of our guests’ personal information very seriously. We are writing to let you know that on April 22, 2026, we identified unauthorized activity in one of our web applications that houses certain guest reservation data.
We have learned that certain guests’ names, email addresses, telephone numbers, and/or home addresses, along with other reservation details (e.g., reservation numbers, dates of stay, and any special requests) for reservations in our system were accessed by an unauthorized third‑party between October 14, 2025 and April 22, 2026, including yours. Importantly, payment and other financial information was not stored in the affected system and therefore was not accessed."
Edit: This seems different to the hack from back in February, even though it sounds like the "web application" was vulnerable since October 2025: https://swedenherald.com/article/data-breach-at-best-western-hotel-chain-be-vigilant
This is not their year....
#CyberSecurity #Hotels #Privacy