Irish Landmark Trust has been informed of a cybersecurity incident affecting our booking software provider, SuperControl.
On 1 November, SuperControl identified unauthorised activity affecting parts of its platform through which guest and booking information can be accessed. SuperControl has advised that some guests have received fraudulent WhatsApp messages containing accurate reservation details.
SuperControl has engaged independent cybersecurity specialists and legal advisers and is continuing its investigation.
What happened?
SuperControl experienced a cybersecurity incident which may have resulted in unauthorised access to guest and booking information.
What information may have been affected?
SuperControl is still investigating exactly what information was accessed and which customers may have been affected.
At present, we understand that some fraudulent messages have contained accurate guest and reservation details.
Were payment card details affected?
Based on information currently available, payment card details have not been accessed through the SuperControl platform.
Payment information is processed and stored separately using a secure tokenised payment system and is not accessible through the booking platform.
What should I do?
You do not need to take any immediate action.
However, please be cautious of unexpected communications relating to your reservation, particularly those requesting payment information, personal information or urgent action.
Irish Landmark Trust will never contact you via WhatsApp to request:
- Payment card details
- Bank account information
- Passwords
- Security or verification codes
How can I verify a communication?
If you are unsure whether a communication is genuine, please contact us directly:
Email: bookings@irishlandmark.com
Phone: +353 1 670 4733
Always verify unexpected requests using contact details you already know and trust, rather than those provided within a message.
In the lead-up to your stay, you will receive your House Manager’s contact details. Your House Manager may contact you directly regarding access arrangements and practical information for your visit, and you will have their verified contact information in advance.
What if I clicked a link?
If you clicked a link but did not provide any personal or payment information, no further action is currently required.
If you entered payment information, banking details or other sensitive information, you should contact your bank or card provider immediately.
Will Irish Landmark Trust provide updates?
Yes. We will continue to update this page as further information becomes available from SuperControl.
Why am I receiving this notification if I have not received a suspicious message?
At this stage, SuperControl has not been able to confirm exactly which customers may have been affected. We are therefore sharing this information as a precaution and encouraging all guests to remain vigilant.