Best Western Hotels warns that customer reservation data may have been leaked in an infringing manner

BWH Hotels confirmed a cyberattack on April 22, 2026, stealing customer names, emails, phone numbers, postal addresses and reservation details
The attackers exploited a flaw in a web application that contained guest reservation data, but banking and payment details were not affected.
The company took the app offline, hired outside experts and urged customers to stay alert for suspicious communications.

BWH Hotels, a major global hotel chain that operates thousands of hotels around the world, has confirmed that it suffered a cyber attack and lost confidential customer data.

In a data breach notification recently sent to affected individuals, the company’s chief technology officer (CTO) Bill Ryan said the attack was detected on April 22, 2026. Criminals stole sensitive data, including names, email addresses, phone numbers, and postal addresses, of an as-yet-undetermined number of people.

Reservation details were also obtained, including reservation numbers, dates of stay, and special requests.

A warning to users

The data was generated between October 14, 2025 and April 22, 2026, but it was unclear how long the criminals lurked within BWH Hotels’ systems.

The anonymous attackers apparently found a flaw in a web application that hosted certain guest reservation data, but that information did not include payments or banking details.

“Upon discovering the incident, we immediately took the app offline and revoked unauthorized access,” Ryan said. The Registry in a written statement.

“We have engaged leading third-party cybersecurity experts to support our incident response efforts and help further strengthen existing safeguards.”

Ryan also urged his clients to be “very vigilant” about any unexpected or suspicious communications about hotel stays.

“If you receive a suspicious communication, such as an unexpected email, text message, WhatsApp message or phone call requesting payment, codes, logins or ‘verification’, even if they refer to a BWH Hotels property or an upcoming reservation, do not engage. Navigate to the sites directly instead of clicking on links,” he stressed.

BWH Hotels is a global hotel group that serves as the parent organization of Best Western Hotels & Resorts, WorldHotels and SureStay Hotels. It operates approximately 4,300 hotels in more than 100 countries and earns more than $8.5 billion annually.