Hackers accessed BWH Hotels reservation system for months

BWH Hotels disclosed that an unauthorized third party accessed a web application containing guest reservation data from October 14, 2025 to April 22, 2026, exposing names, email addresses, telephone numbers, home addresses and reservation details across the group's multi‑brand portfolio; payment data was not stored in the affected system. The company took the application offline, revoked access, engaged external cybersecurity experts, notified affected customers, and warned guests to remain vigilant for phishing and fraudulent booking or payment requests.