Bookeasy Breach Exposes Campers' Personal Data
Booking platform operator Bookeasy says customer personal and booking information may have been compromised in a cyber incident.
Updated on Nov. 14, 2026 in Cybersecurity
Live Poll
Do you trust online booking platforms to keep your personal data safe?
Bookeasy, which processes bookings and permits for the National Parks booking system, has identified a cybersecurity breach that may have exposed customers' personal and booking information. The ACT government temporarily disabled the platform and emailed around 6,000 users warning of scam and phishing attempts.
Why it matters
The incident affects campers who book sites through the Bookeasy-operated system, which stores email addresses and phone numbers. Systems in Queensland, Victoria and South Australia were also hacked in the same week, raising concern about the broader security of booking platforms across Australia.
Bookeasy stores personal data including email addresses and phone numbers, and has not detected any access to credit card details. The full number of affected records has not been confirmed as the investigation continues with cyber experts.
The players
Bookeasy
Bookeasy is an Australian booking software provider that processes bookings and permits for the National Parks booking system.
ACT Government
The Australian Capital Territory government is the territory administration that suspended the campground booking platform and issued the customer warning.
The details
Bookeasy took immediate containment action after a security alert and engaged cyber experts to investigate. The ACT government suspended the platform as a precaution after Bookeasy notified it of a cyber incident and a potential unauthorised release of information, and some Canberra campers received suspicious messages by email and WhatsApp.
Timeline
This week: systems in Queensland, Victoria and South Australia were hacked.
This week: the ACT government emailed around 6,000 users warning of scam or phishing attempts.
Roadmap
The breach follows a pattern of attacks on booking systems that Scamwatch has repeatedly warned about in its scam-reporting advice. Australians are being urged to treat unsolicited messages about bookings with caution, as phishing attempts exploit legitimate platforms.
Campers who have booked through Bookeasy should be alert to unexpected emails or WhatsApp messages about their bookings and avoid clicking links in them. Do not share bank or card details in response to unsolicited messages.
The takeaway
Treat unsolicited messages about bookings as potential scams, even when they appear to come from a trusted platform. Verify any booking changes by contacting the park or booking service directly through its official website.
Further reading
For more on digital threats facing Australians, see Cybersecurity coverage.
More information
Report suspicious messages and get advice at the Scamwatch scam-reporting and advice site.
Source note: This article includes information reported by Australian Broadcasting Corporation.
Live Poll
Do you trust online booking platforms to keep your personal data safe?
