
- BWH Hotels confirmed a cyberattack on April 22, 2026, stealing customer names, emails, phone numbers, postal addresses, and reservation details
- Attackers exploited a flaw in a web app holding guest reservation data, but payment and bank details were not affected
- Company took the app offline, engaged external experts, and urged customers to stay vigilant against suspicious communications
BWH Hotels, a major global hospitality chain operating thousands of hotels around the world, has confirmed suffering a cyberattack and losing sensitive customer data.