Warning About Fraudulent WhatsApp Messages

Fraudulent WhatsApp messages regarding hotel reservations are currently circulating. These messages ask guests to enter personal information or credit card details via a link. We would therefore like to remind you that messages from our resort are sent exclusively from official email email addresses. We never request credit card information via a link in a WhatsApp message. Please do not click on such a link or enter any information. Ignore and delete the message, then block and report the number in WhatsApp. Your reservation with us remains valid in any case.

UPDATE from October 27, 2026, 10:00 a.m.
How the scammers obtained the reservation data.
A guest management portal used by the entire hotel industry—which handles pre-registrations, guest information, and check-outs, among other things—has informed us that the company has been the victim of a cyberattack. According to the latest information, this incident also affects data from guests at our resort: hotel, name, cell phone number, arrival and departure dates, and booking costs for reservations with arrival or departure dates between October 17 and 21, 2026. According to the service provider, credit card data and special categories of personal data as defined in Article 9 of the GDPR are expressly not affected.
Together with our IT security, data protection, and external security specialists, we immediately implemented the necessary protective measures and have suspended our collaboration with the service provider until further notice. Fraudulent activities are being reported immediately to the relevant internet service providers and authorities. Our own systems have been reviewed and show no irregularities. The operation of our hotel and our website thermal baths remains unaffected.

If you have any questions, you can reach us at +43 2172 20 500 700 or by email at anfragen@stmartins.at.