2026 Hospecs — 100+ Dutch hotel reservation data breach (guest phishing wave)
Data compromised
Guest contact details, arrival and departure dates for active reservations; precision phishing and fake payment requests
Technical writeup
Hospecs managing director Tim Vissers confirmed in early June 2026 that at least 100 Dutch hotels affiliated with the hospitality group suffered a large-scale data breach exposing reservation data for thousands of guests—contact information plus arrival and departure dates—enabling convincing fake payment requests. Techzine and Dutch News reported Vissers believed the weak point lay in shared booking or channel-management software rather than individual hotel networks, with new affected properties still being reported and incidents surfacing in Belgium and Ireland. The Dutch data protection authority AP said it was investigating; Hospecs had not published a precise victim count at catalog time—BreachHistory indexes the confirmed multi-property guest-data exposure without inflating from criminal marketing.
Root cause
Suspected compromise of shared booking/channel-management software used across affiliated hotels