Phishing: Hotel and accommodation, Austria
Unknown persons took over the Booking.com extranet access of an Austrian accommodation business and changed the bank details for payouts.
- Incident · date unknown · Austria
- Evidence: one media report
- Phishing
- Account takeover
- Fraud
As of
What happened
Booking.com then transferred payments to an unknown foreign account. The Austrian Economic Chamber cites the case as a warning example for the sector.
- Affected
- Company (anonymous)
- Industry
- Hotel and accommodation
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- true
- Bankruptcy
- no
- Entry point
- Compromised access to the Booking.com extranet, two-factor protection apparently circumvented
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
CEO fraud, diverted payment, fake invoice
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Regularly check changes to payout details on booking platforms and activate notifications for them.
Sources
- Online-Sicherheit bei Buchungplattformen − Aktuelle Fälle und To-do's (opens in a new window) Wirtschaftskammer Österreich, Fachverband Hotellerie · 2025-07-31
«Booking.com fälschlicherweise Zahlungen an ein unbekanntes ausländisches Bankkonto überwies»