AI agent breach hits NightsBridge platform used by 10,000 South African hotels

A vulnerability allowed an AI‑driven attack to access future booking data, risking phishing and reservation hijacking across the hospitality sector.

NightsBridge, a South African tech firm that links hotels and guesthouses to online booking sites, warned clients of a data breach on 2 November. The breach exploited a flaw in its code, giving attackers access to future channel‑booking records across partner channels.

The company says the compromised data included booking dates and reference numbers, enough for scammers to craft realistic WhatsApp phishing messages. No payment details or sensitive guest info were exposed, and the breach was contained before large‑scale phishing began.

Why it matters to your business

Hospitality operators rely on NightBridge to synchronise inventory across platforms. A breach of booking data can lead to reservation hijacking, loss of revenue and damage to brand trust. Recent incidents at Booking.com and HTI show a pattern of AI‑driven attacks targeting the sector.

If your property uses NightsBridge, guests may receive fake messages asking for payment or personal details. This can increase chargebacks, waste staff time and erode customer confidence.

What to do on Monday

• Alert staff to verify any guest communication that references bookings, especially WhatsApp messages, before acting.
• Review and tighten any internal processes for handling reservation changes; require dual verification for payment requests.
• Contact NightsBridge for the latest security patch and confirm that your property’s data is protected.

Sources

• mybroadband.co.za: AI agent believed to have breached South African platform that handles bookings for 10,000 hotels, guesthouses, lodges and B&Bs

Reported by mybroadband.co.za.