EN
HR
After we wrote yesterday about a case in which fraudsters used data related to actual guest reservations, Agency for Personal Data Protection issued a warning to citizens to be especially vigilant about possible phishing attacks.
According to AZOP, the exfiltration of personal data, such as first and last names, email addresses, phone numbers, and similar data, from the systems of various organizations can result in an increased number of fraudulent messages that appear to be sent by legitimate companies, i.e. hotels. Especially if the message refers to a hotel where you have already made a reservation.
As we reported yesterday, a security incident has recently been reported in the Croatian tourism sector in which fraudsters are using data related to actual guest reservations to send fake messages and try to trick them into providing additional information or making additional payments. As was later confirmed, the breach did not necessarily occur at the level of an individual hotel, but rather at an external technology partner involved in processing and managing reservation data.
The aim of such messages is to trick the recipient into sharing personal, financial or security information, including usernames, passwords or credit card details. AZOP specifically warns citizens not to enter personal and financial information via links delivered in emails, SMS messages or messages on social networks - pay particular attention to WhatsApp messages.
Before any reaction, it is necessary to check whether the sender's e-mail address, telephone number or website match the official contacts of the organization on whose behalf the message is sent. If there is doubt about the credibility of the message, it is recommended to contact the organization exclusively through officially published communication channels.
The AZOP emphasizes that they are conducting supervisory procedures over the managers and processors who have been involved in incidents in recent days, and announces that they will inform the public when new information is available.
Read more about phishing and how to protect yourself at the link https://azop.hr/phishing-napadi-kako-ih-prepoznati-i-zastititi-se/
