Hotel guests have been urged to remain vigilant for convincing scam messages following a data breach at a major hotel chain. Personal details of individuals with bookings at one of the chain’s properties were compromised over a six-month period.

BWH Hotels, the parent company behind WorldHotels, Best Western Hotels & Resorts, and Sure Hotels, alerted customers to the breach via email, stating that “certain guests’ names, email addresses, telephone numbers, and/or home addresses, along with other reservation details” had been accessed between October 14, 2025 and April, 22. It added: “Importantly, payment and other financial information was not stored in the affected system and therefore was not accessed.”

The company confirmed it had taken measures to halt the unauthorised access and was implementing additional security protocols to prevent future breaches. Affected customers were advised to take precautions to ensure fraudsters could not exploit them, with warnings to be particularly wary of unsolicited emails, texts, WhatsApp messages or phone calls relating to hotel reservations.

Privacy experts have now cautioned that the real concern lies not just in what was stolen, but in how that data could be used. Hotel booking information can lend credibility to subsequent scams, as criminals may be able to cite genuine stays, dates, locations or reservation numbers.

Peter Nguyen, a privacy expert from Protect My Data, warns that travellers should not brush off this type of breach simply because payment details were not compromised. “A hotel reservation contains more useful information than people realise.

“A scammer does not always need your card number to target you. If they know your name, phone number, hotel, stay dates and booking reference, they can make a fake message look extremely convincing.

“That is the risk with travel data. It gives criminals context. Instead of sending a vague scam, they can contact you with details that feel personal and accurate.”

Nguyen advises guests to exercise particular vigilance regarding any unexpected communication claiming there is an issue with a booking, payment, refund or reservation. He warned that a fraudster could pose as a representative from the hotel, a booking platform, customer support team or payment department.

The message may allege that a card requires reverification, a stay faces cancellation, a refund is pending, or that additional information is required prior to arrival. He said: “The most dangerous message is one that sounds helpful. It might say your booking needs confirming, your payment failed, or your refund is ready. Because it references a real hotel stay, people are more likely to click.

“If the message asks for payment, codes, logins or verification, do not engage through that message. Go directly to the hotel or booking platform yourself.”

Nguyen highlights that WhatsApp and SMS messages pose a particularly heightened risk due to their immediacy. “A text or WhatsApp message creates urgency. It feels like someone is dealing with your booking right now. That pressure makes people act faster than they would with an email.”

BWH Hotels’ own alert has cautioned customers against responding to suspicious communications requesting payment, codes, logins or verification, even where they mention a BWH Hotels property or a forthcoming reservation.

Why reservation data holds such value

While many individuals are primarily concerned about card details in a data breach, Nguyen maintains that contact and booking information can still pose significant danger. He explained: “Names, phone numbers and email addresses are the starting point for phishing. Add reservation details and the scam becomes much more targeted.

“A criminal could send a message saying, ‘Your stay at this property on this date needs confirmation.’ That feels completely different from a generic scam email because it contains something real.”

He noted that postal addresses can also lend scams greater legitimacy. He explained: “If a scammer has your address, they can make a fake message feel more official. They might use it in a fake invoice, refund notice, complaint response or identity check.”

Special requests may also reveal details guests did not expect to become part of a security issue.

“People sometimes include personal information in hotel requests, such as accessibility needs, arrival times, family arrangements or reasons for travel. Even small details can help scammers tailor their approach.”

What guests should do now

Nguyen says anyone who has stayed with, or booked through, a BWH Hotels property during the affected period should remain vigilant, but not panic. He added: “The first step is awareness. If you receive a message about a Best Western, WorldHotels or SureStay booking, slow down and verify it independently.”

He advised guests to refrain from clicking links in unsolicited messages. “Open the official hotel website yourself, use the original booking confirmation, or contact the property through a trusted number,” he said.

“Do not use a number or link sent in a suspicious message.”

Guests should equally exercise caution if asked to confirm personal details, he warned. “A genuine hotel may need basic details to find your booking, but they should not ask for banking codes, account passwords or card security codes through an unexpected message.”

Should anyone have already clicked a suspicious link or divulged card details, Nguyen urges them to contact their bank without delay. He warned: “Speed matters. If you entered payment details, call your bank straight away. If you entered a password, change it immediately, especially if you use it anywhere else.”

He also advises safeguarding email accounts, as email is frequently the channel scammers exploit to reset other accounts.

“Your email account is the front door to much of your digital life,” he said. “Use a strong, unique password and switch on two-factor authentication.”

Why this warning matters for summer travel

The breach arrives as numerous holidaymakers are arranging summer accommodation, weekend getaways and spontaneous trips. Nguyen suggests this makes hotel-related scams particularly hazardous.

“Travel season gives scammers a huge advantage. People are expecting hotel messages, payment reminders and booking updates. That makes fake messages easier to hide among real ones.”

He suggests guests ought to be especially cautious of messages arriving close to their check-in date. “A message sent shortly before a stay can create panic. If it says your room will be cancelled unless you act now, that is exactly when you need to stop.”

The most reliable approach, Nguyen maintains, is to regard unexpected booking messages as suspicious until confirmed otherwise. He said: “If a message knows your hotel and dates, that does not automatically make it real. It may simply mean the scammer has booking data. Do not let accurate details rush you into clicking. Verify through the official route every time.”

In its email, signed by Bill Ryan Chief Technology Officer of the hotel chain and sent last month, it said:

“BWH Hotels, the parent company for WorldHotels, Best Western Hotels & Resorts, and Sure Hotels, takes the privacy and security of our guests’ personal information very seriously. We are writing to let you know that on April 22, 2026, we identified unauthorised activity in one of our web applications that houses certain guest reservation data.

“We have learned that certain guests’ names, email addresses, telephone numbers, and/or home addresses, along with other reservation details (e.g., reservation numbers, dates of stay, and any special requests) for reservations in our system were accessed by an unauthorised third‑party between October 14, 2025 and April 22, 2026, including yours. Importantly, payment and other financial information was not stored in the affected system and therefore was not accessed.

“Upon discovering the incident, we immediately took the application offline and revoked the unauthorised access. We have engaged leading external cybersecurity experts to support our incident response efforts and to assist with the further strengthening of existing safeguards.

“We advise guests to be extra vigilant when viewing any unexpected or suspicious communications about hotel stays. If you receive a suspicious communication such as an unexpected email, text, WhatsApp message, or telephone call that asks for payment, codes, logins, or “verification,” even if they reference a BWH Hotels property or an upcoming reservation, do not engage. Navigate to sites directly rather than clicking links.

As part of protecting your personal information and to prevent payments to fraudulent parties, here are some precautions you can take:

• Stay alert for suspicious sender addresses, urgent or unexpected unsolicited requests, and strange links, especially any unexpected request for payment or personal information. Treat any suspicious request with caution. If you have a question regarding a suspicious request, please contact our customer service team
• Scammers may create webpages that closely resemble legitimate hotel booking pages. Always review the web address before entering payment details. If a page looks unexpected or unfamiliar, stop and verify it with our customer service team before proceeding. If you entered or shared any payment (credit card) information in response to a scam, please immediately report it to your financial institution and follow security steps they recommend. If you have any questions, please contact BWH Hotels’ data protection office at [email protected]

Cornwall is famous as a holiday destination around the UK and beyond. Its cute seaside towns and villages, rugged beauty, dramatic cliffs, golden beaches and azure sea all make it a hugely popular destination, with each beach and cove having its own unique charm.

But some, like St Ives on the north-west coast, are more famous than others. In fact, it is going to be the most popular place for staycations in the UK this year, according to Sykes Holiday Cottages. And that’s just the latest accolade for the town, which has also been called the “artsiest” in Cornwall. In 2011, the postcard-perfect town outshone rivals from Spain, France and Italy to be named one of Europe’s top beach destinations.

However, despite its picturesque appeal, when I visited during a recent summer I found that St Ives was marred by murky waters and an overwhelming number of tourists (including me, of course). And those considering a Cornish getaway might discover a more enchanting spot just around the corner, just like I did.

St Ives is brimming with attractions, boasting five sandy beaches and a gently sloping shoreline perfect for families and those looking to bask in the sun. The beachfront is well-equipped with amenities including lifeguard patrols from Easter through September, deck chair rentals, and water sports equipment available for hire – kayaks, stand-up paddleboards, and more. On a sunny day, Porthmeor Beach buzzes with activity, earning its reputation as the town’s “premier” beach.

Just beyond the beachfront, visitors can explore a delightful labyrinth of narrow lanes lined with pastel cottages, which play host to an array of restaurants, bars, and cafes. Local dining spots serve up authentic Cornish fare, with traditional dishes such as pasties, crab and mussels. The Fish Shed (for fresh seafood) and St. Eia (for natural wine and small plates) are two places worth a visit.

The town has also been given the title of “Cornwall’s art mecca” by virtue of being home to the Tate, the Barbara Hepworth Museum and Sculpture Garden, historic studio Leach Pottery, the award-winning Porthminster Gallery and a swathe of smaller indie galleries.

If you’ve never been, like I hadn’t until recently, it’s a must-visit. Arriving with high hopes, the bay looked breathtaking from afar (the bustling car park at the top of the town). The honey-coloured stone buildings in the streets below were inviting, but once I set foot on the beach, reality hit. Families and groups occupied every bit of sand on a weekday afternoon in July. Even at 4pm, Porthmeor beach was still crowded, including its far side.

With a Cornish pasty in hand, I finally found a spot to sit, only to be met by a horde of seagulls that had clearly spent the day gorging on litter left on the sand.

The real letdown came when I went for a quick swim in the sea. Having visited Kynance Cove and Pedn Vounder Beach just days before, I was underwhelmed by the slightly murky water that seemed polluted by heavy footfall and frequent boat activity. I questioned why I was swimming here when Cornwall is home to so many clear, secluded coves.

Later that same evening, when I drove further up the coast towards Hayle, I discovered a gem. Gwithian Towans Beach is at the far end of St Ives Bay and boasts a wide, spacious sandy beach that is popular for surfing but rarely crowded. It’s approximately a 24-minute drive via the Hayle Bypass to reach this incredible beach, which is backed by massive dunes perfect for a long walk.

When the tide recedes, the nearby Godrevy Beach seamlessly blends with Gwithian to create a vast expanse of beach. At high tide, it transforms into a distinct cove, framed by cliffs and the National Trust-owned headland. Situated at the far end of St Ives Bay, Godrevy Beach is a neighbouring treasure, famed for its iconic lighthouse and a small colony of seals.

The water here is noticeably clearer, likely due to its exposure to Atlantic swells that disperse sediments. A swim here is invigorating and less daunting than in St Ives itself. On the beach, you can find a private spot behind dramatic rocks – even on a bustling afternoon. However, the true marvel of this westerly location is the sunset views.

Parking is available at the top of the headland in a National Trust car park, from where it’s a short walk down to Gwithian beach for a quick dip. This is arguably more accessible for visitors than parking at the top of St Ives and navigating the steep streets down to the shoreline there. Facilities are somewhat limited, with a small cafe and surf shop at Gwithian and a National Trust cafe at Godrevy. Limited toilet and shower facilities are available in the Gwithian parking areas.

Parents of pupils at a private school were told it would close less than an hour before the end of the day, as doubts over the 137-year-old institution’s future persist. Abbotsholme School was founded back in 1889 and sits within 140 acres of rural countryside on the Derbyshire and Staffordshire border.

The co-ed independent day and boarding school for pupils aged from two to 20 has come under financial strain in recent years, with accounts filed at Companies House in 2024 revealing that total liabilities exceeded total assets by £1,514,645, Derbyshire Live reports. It was previously announced the school would be forced to shut for good after the entire school estate was bought by local businessmen Syd Phillimore and Jamie Buchanan, who retained the freehold of the land and leased the operation of the school itself to Abbotsholme 2026 Ltd on Friday, May 29.

Abbotsholme 2026 Ltd is led by Tony Costigan, a Conservative local councillor and insolvency practitioner. The structure of the deal led to fears in the community that the school’s future was being put at risk in the interests of obtaining the valuable land, The Times reports.

The new landlords rejected the suggestion, insisting dividing up the educational operations and historical freehold represented a “rescue solution” for the cash-strapped school.

But on Friday (June 5), it was reported the school was set to close on Monday, June 22, after Abbotsholme 2026 Ltd said the “financial challenges facing the school are significantly greater than originally understood”.

Then on Sunday (June 7), head teacher Charlotte Molloy is understood to have written to parents informing them that following discussions with the owners, the school would be opening in September, as per Derbyshire Live.

Ms Molloy said she would be taking close charge of the process. “I know there is a great deal of communication and speculation, so it is important that people know there is now a clear plan in place: Abbotsholme will remain open in September and there is a committed team in place to lead and support the school moving forward,” she wrote.

“I am looking forward to working with all of you as we begin the next chapter in the school’s story.”

But on Wednesday (June 10) parents’ plans were thrown up in the air again, following a new letter from Abbotsholme 2026 Ltd director Tony Costigan.

Mr Costigan told them the last day of school would be June 10, with the exception of pupils still sitting GCSE and A level exams.

The Telegraph reports that the message was sent at 4.11pm, during the last class of the day, shortly before many children would be picked up by parents. “From tomorrow, and with the safety of pupils at the forefront of every decision we make, the school will be closed to pupils,” he wrote.

“For our boarding pupils, please be reassured that they will remain on-site and continue to be looked after by our dedicated boarding staff, exactly as normal, until collection arrangements have been confirmed.”

Derbyshire Live has been told that teachers who had continued to work without being paid for the past two months have now ceased going into the school.

This has meant that there are insufficient staff numbers to supervise pupils, which forced the early closure on safeguarding grounds.

Angry parents are now reportedly attempting to get back any money they have paid for the remainder of the current academic year as well as any payments they may already have made for scheduled summer activities and the start of the autumn term.

Fees for the school have ranged from £2,846 per term for the youngest day pupils up to £6,602 per term for day sixth formers.

The fees for full boarding ranged from £11,661 to £13,225 per term and up to £15,510 for international students, the outlet reports.

It’s not yet clear whether the closure is a temporary or permanent measure. Express.co.uk has reached out to Abbotsholme School for comment.

Derbyshire Live has approached Mr Costigan and Abbotsholme 2026 Ltd.