Uk Hotel

The chain confirmed information exposed in the breach includes ‘certain guests names, email addresses, telephone numbers, and/or home addresses, along with other reservation details’

Hotel guests have been warned to watch out for convincing scam messages after a data breach at a major hotel chain. Data including personal details of people booked to stay at one of the chain hotels was exposed over a six month period.

BWH Hotels, the parent company for WorldHotels, Best Western Hotels & Resorts, and Sure Hotels notified customers of the breach in an email when it said “certain guests’ names, email addresses, telephone numbers, and/or home addresses, along with other reservation details” had been accessed between October 14, 2025 and April 22. It added: “Importantly, payment and other financial information was not stored in the affected system and therefore was not accessed.”

It confirmed the firm had taken action to stop the unauthorised access and that it was also taking steps to strengthen safeguards to stop any further breaches. And they urged any affected customers to take steps to ensure any scammers did not take advantage of them, warning them to be extra vigilant about unexpected emails, texts, WhatsApp messages or calls referencing hotel stays.

Now privacy experts have warned the concern is not only what was stolen, but how that information could be used next. Hotel booking data can make follow-up scams look far more believable because criminals may be able to reference real stays, dates, locations or reservation numbers.

Peter Nguyen, a privacy expert from Protect My Data, says travellers should not dismiss this kind of breach just because payment details were not exposed. “A hotel reservation contains more useful information than people realise.

“A scammer does not always need your card number to target you. If they know your name, phone number, hotel, stay dates and booking reference, they can make a fake message look extremely convincing.

“That is the risk with travel data. It gives criminals context. Instead of sending a vague scam, they can contact you with details that feel personal and accurate.”

Nguyen says guests should be especially careful with any unexpected message claiming there is a problem with a booking, payment, refund or reservation. He warned a scammer could pretend to be from the hotel, a booking platform, customer support team or payment department.

The message may claim a card needs to be reverified, a stay could be cancelled, a refund is waiting, or extra information is needed before arrival. He said: “The most dangerous message is one that sounds helpful. It might say your booking needs confirming, your payment failed, or your refund is ready. Because it references a real hotel stay, people are more likely to click.

“If the message asks for payment, codes, logins or verification, do not engage through that message. Go directly to the hotel or booking platform yourself.”

Nguyen says WhatsApp and SMS messages are particularly risky because they feel more direct. “A text or WhatsApp message creates urgency. It feels like someone is dealing with your booking right now. That pressure makes people act faster than they would with an email.”

BWH Hotels’ own warning urged customers not to engage with suspicious communications asking for payment, codes, logins or verification, even if they reference a BWH Hotels property or an upcoming reservation.

Why reservation data is so valuable

Many people worry most about card details in a breach, but Nguyen says contact and booking information can still create serious risk. He explained: “Names, phone numbers and email addresses are the starting point for phishing. Add reservation details and the scam becomes much more targeted.”

“A criminal could send a message saying, ‘Your stay at this property on this date needs confirmation.’ That feels completely different from a generic scam email because it contains something real.”

He said postal addresses can also make scams more credible. He explained: “If a scammer has your address, they can make a fake message feel more official. They might use it in a fake invoice, refund notice, complaint response or identity check.”

Special requests may also reveal details guests did not expect to become part of a security issue. “People sometimes include personal information in hotel requests, such as accessibility needs, arrival times, family arrangements or reasons for travel. Even small details can help scammers tailor their approach.”

What guests should do now

Nguyen says anyone who has stayed with, or booked through, a BWH Hotels property during the affected period should be alert, but not panic. He added: “The first step is awareness. If you receive a message about a Best Western, WorldHotels or SureStay booking, slow down and verify it independently.”

He advised guests to avoid clicking links in unexpected messages. “Open the official hotel website yourself, use the original booking confirmation, or contact the property through a trusted number,” he said. “Do not use a number or link sent in a suspicious message.”

Guests should also be careful if they are asked to confirm personal information, he said. “A genuine hotel may need basic details to find your booking, but they should not ask for banking codes, account passwords or card security codes through an unexpected message.”

If someone has clicked a suspicious link or shared card details, Nguyen says they should contact their bank immediately. He warned: “Speed matters. If you entered payment details, call your bank straight away. If you entered a password, change it immediately, especially if you use it anywhere else.”

He also recommends securing email accounts, as email is often the route scammers use to reset other accounts. “Your email account is the front door to much of your digital life,” he said. “Use a strong, unique password and switch on two-factor authentication.”

Why this warning matters for summer travel

The breach comes as many travellers are booking summer stays, weekend breaks and last-minute trips. Nguyen says that makes hotel-related scams especially dangerous.

“Travel season gives scammers a huge advantage. People are expecting hotel messages, payment reminders and booking updates. That makes fake messages easier to hide among real ones.”

He says guests should be particularly wary of messages close to their check-in date. “A message sent shortly before a stay can create panic. If it says your room will be cancelled unless you act now, that is exactly when you need to stop.”

The safest rule, Nguyen says, is to treat unexpected booking messages as suspicious until proven otherwise. He said: “If a message knows your hotel and dates, that does not automatically make it real. It may simply mean the scammer has booking data. Do not let accurate details rush you into clicking. Verify through the official route every time.”

In its email, signed by Bill Ryan Chief Technology Officer of the hotel chain and sent last month, it said: “BWH Hotels, the parent company for WorldHotels, Best Western Hotels & Resorts, and Sure Hotels, takes the privacy and security of our guests’ personal information very seriously. We are writing to let you know that on April 22, 2026, we identified unauthorised activity in one of our web applications that houses certain guest reservation data.

“We have learned that certain guests’ names, email addresses, telephone numbers, and/or home addresses, along with other reservation details (e.g., reservation numbers, dates of stay, and any special requests) for reservations in our system were accessed by an unauthorised third‑party between October 14, 2025 and April 22, 2026, including yours. Importantly, payment and other financial information was not stored in the affected system and therefore was not accessed.

“Upon discovering the incident, we immediately took the application offline and revoked the unauthorised access. We have engaged leading external cybersecurity experts to support our incident response efforts and to assist with the further strengthening of existing safeguards.

“We advise guests to be extra vigilant when viewing any unexpected or suspicious communications about hotel stays. If you receive a suspicious communication such as an unexpected email, text, WhatsApp message, or telephone call that asks for payment, codes, logins, or “verification,” even if they reference a BWH Hotels property or an upcoming reservation, do not engage. Navigate to sites directly rather than clicking links.

As part of protecting your personal information and to prevent payments to fraudulent parties, here are some precautions you can take:

• Stay alert for suspicious sender addresses, urgent or unexpected unsolicited requests, and strange links, especially any unexpected request for payment or personal information. Treat any suspicious request with caution. If you have a question regarding a suspicious request, please contact our customer service team
• Scammers may create webpages that closely resemble legitimate hotel booking pages. Always review the web address before entering payment details. If a page looks unexpected or unfamiliar, stop and verify it with our customer service team before proceeding. If you entered or shared any payment (credit card) information in response to a scam, please immediately report it to your financial institution and follow security steps they recommend. If you have any questions, please contact BWH Hotels’ data protection office at dpo@bwh.com

Sometimes there’s no need to hop on a plane when you have the picture-postcard landscapes of the UK, and during a stay at a charming UK hotel, I was whisked away to Italy in a secluded oasis

A beautiful hotel and pub, with only eight bedrooms, felt as though I was somewhere else entirely, not least the rolling UK countryside.

In the heart of the Oxfordshire countryside, encircled by picturesque towns and quaint villages, is The Killingworth Castle, an historic pub with numerous culinary recognitions and eight luxurious bedrooms. Its idyllic grounds with honey-coloured stone buildings and pristine gardens filled with seasonal flowers were enough to transport me to scenes in Italy, as I blissfully settled into what felt like a home away from home.

Set against its beautiful green terrace and peaceful grounds, overlooking traditional stone buildings, proved the perfect spot to enjoy a drink outside on one of the inn’s many inviting benches. Certainly an oasis during the summer months, it’s easy to see why The Killingworth Castle has been recognised as having one of the best pub gardens in the UK, by Enjoy Travel.

READ MORE: ‘I’ve saved £2,000 on luxury holidays by letting a stranger live in my one-bedroom flat’READ MORE: Small Cotswold town used as film set for Disney’s Rivals with independent shops and railway walk

Nestled in Wootton, the hotel affectionately dubbed ‘The Killy’, is perfectly positioned as a gateway to explore the Cotswolds and is just a 30-minute drive from the historic city of Oxford. Its location is an undeniable draw with access to some of the most beautiful parts of the UK, like Burford, Bourton-on-the-Water and Bibury, but the charming town of Woodstock, just a stone’s throw away, also warrants a visit and is home to the iconic Blenheim Palace.

The Killingworth Castle is run by husband and wife Jim and Claire Alexander, who are at the heart of the operation. From the moment I arrived, I felt at home, with a warm welcome from their dedicated staff, the inviting blend of farmhouse charm and boutique-hotel comfort, and a scenic setting that felt like I was living my Italian dream, albeit in the heart of the Great British countryside.

When I wasn’t exploring the Cotswolds or Oxfordshire, ‘The Killy’ was the perfect oasis for a quintessential country retreat, and while it may be small, it proved even more reason to stay.

Bespoke luxury rooms

I checked into one of their eight luxurious rooms in the stable block, which felt as though it was tucked inside a storybook house, with exposed beams, exposed brick and slanted walls. It felt like my very own hidden retreat.

There was a grand, rustic oak four-poster bed adorned with a quilted throw, a stylish seating area of leather chairs and courtyard views, and a roll-top bath in a corner nook beneath a skylight that blissfully welcomed the tapping of spring rain.

While there were all the usual amenities for a comfy stay, every room also welcomes the addition of complimentary English sherry on arrival – definitely a perk for those pre-dinner drinks or evening nightcaps. All the rooms are individually designed with handpicked rustic antique furniture, and my delightful stay in room eight offered a blend of old-world architecture with bespoke luxury.

Tasty delights

Once I had settled in my room, which took no time at all, I strolled over to the main building with the pub. There’s a bar selling local beers on top, alongside a cosy area with darts and a pool table, armchairs snuggled around a log burner and the main dining room, with a timeless countryside ambience, vaulted timber ceilings, exposed stone walls, and framed photos.

The pub offers an à la carte menu, a set lunch, a Sunday menu, or a tasting menu under the helm of head chef Rob Mason, and has garnered prestigious acknowledgement for its offerings. The Killingworth Castle has been continuously recommended in the Michelin Guide, awarded their third AA Rosette, and has been featured in the UK’s Top 50 Gastropubs list for 2026.

It’s safe to say that before I had even browsed the menu, I was excited for what I was going to taste as an avid foodie. So I opted for the tasting menu, partly so I could savour as many flavours as possible, but really, once I saw the menu, it was hard to resist.

I was treated to a plethora of mouthwatering flavours that were as much a feast for the eyes as they were for my taste buds! Even the treacle bread was an exceptional start, presented on a bed of wheat and barley.

I went on to devour the delicate flavours of Evesham asparagus, gribiche sauce, cracklebean egg yolk and sourdough with a welcoming burst of wild garlic, before tasting the roasted hand-dived scallop, pork jowl, apple and cider butter sauce, which really was a tantalising combination.

Yet my favourite course was the wild sea bass Grenobloise, with brown butter sauce, capers, lemon, and parsley. The last savoury course of the menu was the succulent Cotswold lamb, braised neck, peas, broad beans, goat’s cured and malt vinegar, that melted in the mouth.

Do you have a travel story to share? Email webtravel@reachplc.com

Just when I thought I hadn’t been spoiled enough, I was given my first sweet course of vanilla and rhubard, which proved the perfect palate cleanser, before a delight of chocolate delice, Hukambi milk chocolate, hazelnut, and Cruz del Mar raisins. It was certainly a journey of flavours I won’t forget in a hurry.

The tasting menu at The Killingworth Castle is £95 per guest, with the option to add a wine flight for an additional £55 per person. Otherwise, guests can enjoy a three-course meal from the à la carte menu for £65 per person.

The charm of ‘The Killy’

The food at breakfast was just as exceptional, with the brightest orange egg yolks I’ve ever been lucky enough to consume on my eggs Benedict, with a side of bacon. And the benefit of the hotel only bearing eight rooms was certainly felt at breakfast. There was no morning rush in which you’re left fighting for the last slice of pineapple or queuing for 15 minutes to get your hands on a fresh omelet.

Instead, my day began with a warm welcome from owner Jim, a warming cup of coffee, and the gentle hum of fellow guests against the inviting, traditional charm of ‘The Killy’. I could have easily stayed for longer as I melted into my surroundings.

Rooms at The Killingworth Castle start from £169 per night during the week, and from £205 during the weekend, with breakfast included in each rate. For more information or to book your country escape, visit The Killingworth Castle website.

Book it

Rooms at Killingworth Castle cost from £169, with breakfast included. Visit www.thekillingworthcastle.com/