Hotel guests are being advised to stay cautious of deceptive scam messages following a security breach at a well-known hotel chain. Personal information of individuals with bookings at one of the chain’s hotels was exposed over a six-month period.
BWH Hotels, the parent company of WorldHotels, Best Western Hotels & Resorts, and Sure Hotels, alerted customers about the breach via email. The company disclosed that certain guest details such as names, email addresses, phone numbers, home addresses, and reservation specifics were accessed between October 14, 2025, and April 22, 2026. Fortunately, sensitive financial data was not stored in the compromised system and remained secure.
The company has taken immediate action to halt unauthorized access and is enhancing security measures to prevent future breaches. Guests are advised to be extra vigilant against unexpected correspondence, like emails, texts, WhatsApp messages, or calls related to hotel stays.
Privacy experts emphasize that the concern extends beyond the stolen data and lies in how that information could be exploited. Scammers could leverage hotel booking details to craft convincing follow-up scams by referencing real stays, dates, locations, or reservation numbers.
Peter Nguyen, a privacy expert from Protect My Data, highlights the significance of hotel reservations containing valuable information that can aid scammers in creating convincing messages. Travelers are cautioned to remain alert and cautious concerning any communication regarding booking issues, payments, refunds, or reservations.
It is crucial for guests to verify the legitimacy of messages, avoid clicking on suspicious links, and refrain from sharing personal information if prompted unexpectedly. In case of any doubt, guests are advised to contact the hotel or booking platform directly using trusted contact details.
As travelers gear up for summer trips, weekend getaways, and last-minute bookings, scammers may capitalize on this period to orchestrate hotel-related scams. The best approach is to treat any unexpected booking communication with skepticism and verify its authenticity through official channels before taking any action.

