Share this article on:
Hotel staff have been forced to manually assist guests, while phone lines have been diverted.
After initially disclosing that it had fallen victim to a disruptive cyber attack early this month, the TFE Hotels group has said the recovery process appears to be a long one.
“We are currently investigating a cyber incident affecting our networks,” a group spokesperson said in an updated advisory on TFE Hotels’ website.
“As soon as we became aware of this incident, our IT security team took precautionary measures. We then partnered with cyber experts to investigate what has occurred, and to work towards safely restoring operations.”
According to the hotel group, restoring access to back-end systems is a slow process, with staff manually working to assist guests and with phone lines diverted to a central system.
“We are working to restore access to all our back-end systems. As a result, some of our systems and interactions may be slower as we restore operations. We thank our valued guests, clients, and partners, suppliers, and our team for their patience,” TFE Hotels said.
TFE Hotels added that it does not store the credit card details of its guests, with all such information tokenised to maintain security. However, some historical data may have been impacted.
“Our investigation is ongoing, including with respect to historical data,” TFE Hotels said.
“We are committed to communicating transparently, and in line with our obligations, and will provide any relevant and accurate information as quickly as possible.”
TFE Hotels is currently working with external cyber security experts to investigate and remediate the incident.
Cyber Daily has reached out to TFE Hotels for further commentary but has yet to receive a reply.
TFE Hotels manages a broad range of hotel brands both in Australia and around the world, including Adina, Vibe, and Travelodge, as well as boutique hotels such as The Savoy Hotel on Little Collins in Melbourne. The group has locations in New Zealand, Germany, Switzerland, Austria, Japan, Singapore, and Malaysia.
As of the time of writing, no threat actor has claimed responsibility for the hack.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.