Data breach at TCS Camping: 15,000 guests warned after PHP security flaw
Following a global PHP security flaw, customer data was stolen from the TCS booking system Camping.Care. Fraudsters used the data for fake WhatsApp messages.
TCS Camping warns 15,000 customers after data theft in booking system
Approximately 15,000 customers of TCS Camping were proactively informed of a data theft connected to a global security flaw in the programming language PHP. According to the SRF consumer magazine "Espresso", TCS confirmed that the booking system Camping.Care used by the company was affected by the incident.
Fraudsters were able to steal customer and booking information, including names, telephone numbers and reservation numbers. This data was subsequently used for fraudulent WhatsApp messages relating to existing reservations.
TCS media spokesperson Marco Wölfli emphasised that "sensitive data such as account details and IBAN were not affected". Credit card data had also not been stored in the booking system as a matter of principle.
TCS Camping also pointed out that the company does not send automated booking details, payment requests or links via WhatsApp. The security flaw in question has since been closed.
Source: SRF