Hackers steal tourists’ data from Austrian booking systems

Hackers have stolen tourists’ personal information from booking systems used by tourism associations in Tyrol, Salzburg and Styria, ORF reported. The data has reportedly been used to send fraudulent messages.

Information taken includes names, addresses, email addresses and travel dates. Credit card and bank details were not affected, according to the current state of the investigation.

In Tyrol, four tourism associations and potentially 1,700 businesses were affected, IT service provider Feratel confirmed to ORF Tirol. The associations are Stubai, Serfaus, Seefeld and Ischgl. In Salzburg, 97 hotels across 12 tourism associations were affected.

In Styria, the regional tourism association said the data protection authority had been informed and that all accommodation providers had been notified.

Feratel said the data was obtained through a partner connected to its systems, rather than directly from the company. The security vulnerability has since been closed. The full extent of the attack remains unclear, and no damage has so far been reported in other Austrian provinces.