BWH Hotels

Profile narrative

BWH Hotels operates as a global hospitality network encompassing multiple hotel brands including WorldHotels, Best Western Hotels & Resorts, and Sure Hotels. The organization manages a portfolio of more than 4,000 properties worldwide, serving guests across international markets through its reservation systems and affiliated properties. Headquartered in the United States of America, the company maintains a web application infrastructure that processes guest reservation data including names, email addresses, phone numbers, and booking details.

The scale of BWH Hotels' operations became publicly evident following a security incident disclosed on October 14, 2025, when the organization revealed that attackers had maintained unauthorized access to a reservation web application for more than six months before detection. The breach affected the chain's extensive global footprint spanning its portfolio of brands and thousands of properties. Payment information was not stored in the compromised application, limiting the exposure to personal and reservation data. Upon discovery, BWH Hotels took the affected application offline and engaged external security experts to investigate the intrusion.

The incident highlighted the organization's reliance on centralized digital infrastructure for reservation management across its multi-brand portfolio. No cybercrime group has claimed responsibility for the breach, which raised concerns about potential misuse of the stolen information for scams and phishing attempts targeting affected guests. The company's response included coordination with security specialists to assess the full scope of the compromise and implement remedial measures across its technology environment.

Incidents

1 incident linked to this organisation.