Holiday Haven Shoalhaven Heads Reports Data Breach and Phishing Campaign
Learn More
Holiday Haven, a division of the Shoalhaven City Council in Australia, reports a data breach on February 20, 2026, affecting its Shoalhaven Heads location.
Attackers gained access to the booking management system to harvest contact details of individuals with upcoming reservations. The stolen data was used to send fraudulent emails to customers, likely aiming to steal financial details or credentials through targeted phishing.
The compromised data includes:
- Full names
- Email addresses
- Phone numbers
- Upcoming accommodation booking details
The nature of the attack and the number of affected individuals is not disclosed. Holiday Haven staff began contacting affected individuals on the morning of the discovery to warn them of the fraudulent emails.
The organization is currently working with their technology vendors and have engaged state and federal law enforcement agencies to investigate the incident.
