Scammers target major holiday parks across Australia in cybersecurity breach

Key points

• Australian travellers are being warned their personal information may have been exposed after a cybersecurity breach at booking software provider RMS Cloud. Holiday park operators including BIG4, Reflections Holidays and G'day Parks are understood to have been affected.
• BIG4 said some guests received fraudulent messages asking for credit card or payment details. Reflections Holidays warned guests of phishing emails claiming booking payments had failed.
• Summerstar Tourist Parks in Western Australia has also warned guests, and Scamwatch received more than 13,000 phishing reports in the first three months of 2026.