BWH Hotels confirms cyberattack impacting customer data

As reported by Tech Radar, BWH Hotels, a major global hospitality chain, has confirmed a cyberattack that resulted in the theft of sensitive customer information. The incident was detected on April 22, 2026, and involved unauthorized access to guest reservation data.

The cyberattack on BWH Hotels, which operates under brands like Best Western, WorldHotels, and SureStay Hotels, compromised customer names, email addresses, phone numbers, and postal addresses. Reservation details, including stay dates and special requests, were also accessed. The attackers exploited a vulnerability in a web application that stored guest reservation data. Crucially, payment card and bank details were not affected by the breach.

Upon discovery, BWH Hotels took the affected application offline and engaged external cybersecurity experts to investigate and enhance security measures. Customers have been advised to remain vigilant against suspicious communications, such as unsolicited emails or calls, that may request personal information or payment, even if they reference BWH Hotels or upcoming reservations. The company urges users to navigate directly to official websites rather than clicking on links in suspicious messages.

Source: Tech Radar