TLDR Tech / InfoSec
Hackers accessed BWH Hotels reservation system for months
BWH Hotels, the 4,000-property parent of Best Western, WorldHotels, and Sure Hotels, disclosed that an unauthorized third party maintained access to a guest reservation web application from October 14, 2025, until detection on April 22, 2026, exposing names, email addresses, phone numbers, home addresses, reservation numbers, stay dates, and special requests. Payment data was not stored in the affected system and remains uncompromised, and BWH has taken the application offline, revoked access, and engaged external responders. No group has claimed the intrusion, and affected guests should treat any inbound booking-related email, SMS, or call as likely phishing given the high-fidelity reservation context attackers now hold.
Read the full story