Update - Independent forensic investigators have confirmed that the unauthorised activity identified within the RMS environment has been contained. Our investigation continues as we assess the full scope and impact of the incident.
As part of our response, we continue to rotate API credentials used by integrations connected to RMS. Some customers have experienced interruptions to connected services during this process. Our teams are working with affected customers and integration partners to resolve outstanding issues.
We are also assessing our regulatory notification obligations in the relevant jurisdictions and will comply with applicable requirements.
Our Security Incident Help Centre article provides practical guidance and templates to help you communicate with your guests. If you are experiencing an integration issue or need assistance, please contact RMS Support.
We will publish further updates on this status page, where you can subscribe to receive notifications.
Thank you for your continued patience.
Nov 02, 2026 - 08:31 UTC
As part of our response, we continue to rotate API credentials used by integrations connected to RMS. Some customers have experienced interruptions to connected services during this process. Our teams are working with affected customers and integration partners to resolve outstanding issues.
We are also assessing our regulatory notification obligations in the relevant jurisdictions and will comply with applicable requirements.
Our Security Incident Help Centre article provides practical guidance and templates to help you communicate with your guests. If you are experiencing an integration issue or need assistance, please contact RMS Support.
We will publish further updates on this status page, where you can subscribe to receive notifications.
Thank you for your continued patience.
Nov 02, 2026 - 08:31 UTC
Update - RMS has now notified the Australian Cyber Security Centre (ACSC), the Office of the Australian Information Commissioner (OAIC) and the National Office of Cyber Security regarding this incident.
Our investigation remains ongoing, and we will continue to liaise with these regulators while assessing any further notification requirements.
Oct 30, 2026 - 06:04 UTC
Our investigation remains ongoing, and we will continue to liaise with these regulators while assessing any further notification requirements.
Oct 30, 2026 - 06:04 UTC
Update - Our investigation is ongoing. On Monday, 26 October 2026, RMS identified unauthorised access to a limited part of its environment. We have implemented additional containment, monitoring and access control measures, and our teams are working around the clock with forensic, cyber and legal specialists.
Current findings indicate a subset of guest booking information held in our system is involved, including guest contact information and booking details. Credit card and payment details are not involved.
What customers should do:
While the investigation continues, we recommend providing guidance to your guests on a precautionary basis to remain vigilant against phishing communications. Guest communication guidance is available in the RMS Help Centre: support.rmscloud.com
Oct 29, 2026 - 07:47 UTC
Current findings indicate a subset of guest booking information held in our system is involved, including guest contact information and booking details. Credit card and payment details are not involved.
What customers should do:
While the investigation continues, we recommend providing guidance to your guests on a precautionary basis to remain vigilant against phishing communications. Guest communication guidance is available in the RMS Help Centre: support.rmscloud.com
Oct 29, 2026 - 07:47 UTC
Update - While our investigation is ongoing, current findings indicate a subset of guest reservation information held in our system is involved, including guest contact information and reservation details. Credit card and payment details are not involved.
RMS is also aware of phishing communications sent by an unknown entity claiming to be RMS or one of RMS’ customers. The communications quote reservation information, request confirmation of payment details, and may be received via email, text message or WhatsApp.
We are treating this matter with the utmost urgency, and recognise the concern and disruption this has caused our customers and their guests.
Our team is working around the clock, supported by forensic, cyber and legal specialists, to investigate, support affected customers and understand the full extent of the impact.
We are working closely with affected customers to make sure their guests have clear information and practical guidance while our investigation continues.
Oct 28, 2026 - 07:46 UTC
RMS is also aware of phishing communications sent by an unknown entity claiming to be RMS or one of RMS’ customers. The communications quote reservation information, request confirmation of payment details, and may be received via email, text message or WhatsApp.
We are treating this matter with the utmost urgency, and recognise the concern and disruption this has caused our customers and their guests.
Our team is working around the clock, supported by forensic, cyber and legal specialists, to investigate, support affected customers and understand the full extent of the impact.
We are working closely with affected customers to make sure their guests have clear information and practical guidance while our investigation continues.
Oct 28, 2026 - 07:46 UTC
Update - We continue to monitor for suspicious activity. As a precaution, we've issued new credentials to our integration partners and working with them to complete the change. Some partners and customers will be contacted to update their integration details. If you're unsure whether a request is genuine, contact RMS Support using your usual contact details before acting on it.
We are pursuing the removal of the websites and contact channels used in the scam. Guidance for properties, including an email template you can send to your guests, is in our Help Centre article: https://support.rmscloud.com/hc/en-gb/articles/18149918999823-Security-Incident-Alert-WhatsApp-Phishing-Scam
We know you want more detail about what happened and what it means for your property. We are preparing a fuller update and will share more throughout the day as it becomes available.
RMS will never ask you or your guests for card details or payment through WhatsApp.
Our next update will be no later than 5:00 pm AEDT today, 28 October.
Oct 27, 2026 - 22:18 UTC
We are pursuing the removal of the websites and contact channels used in the scam. Guidance for properties, including an email template you can send to your guests, is in our Help Centre article: https://support.rmscloud.com/hc/en-gb/articles/18149918999823-Security-Incident-Alert-WhatsApp-Phishing-Scam
We know you want more detail about what happened and what it means for your property. We are preparing a fuller update and will share more throughout the day as it becomes available.
RMS will never ask you or your guests for card details or payment through WhatsApp.
Our next update will be no later than 5:00 pm AEDT today, 28 October.
Oct 27, 2026 - 22:18 UTC
Update - We continue to monitor for suspicious activity, pursue the removal of contact channels and websites used in the scam, and work with our integration partners on our ongoing response.
Guidance, including a guest email template, is available in our Help Centre article here:
https://support.rmscloud.com/hc/en-gb/articles/18149918999823-Security-Incident-Alert-WhatsApp-Phishing-Scam
Our next update will be at 9:00 am AEDT tomorrow, 28 October.
Oct 27, 2026 - 10:18 UTC
Guidance, including a guest email template, is available in our Help Centre article here:
https://support.rmscloud.com/hc/en-gb/articles/18149918999823-Security-Incident-Alert-WhatsApp-Phishing-Scam
Our next update will be at 9:00 am AEDT tomorrow, 28 October.
Oct 27, 2026 - 10:18 UTC
Monitoring - RMS is investigating reports of guests receiving phishing messages via WhatsApp, SMS and email that reference genuine booking information and ask recipients to confirm payment details or make a payment.
These messages are not being sent by RMS.
Our teams are actively investigating the activity and taking steps to contain it, protect customer information and support affected customers and integration partners. Some integrations may experience brief interruptions while this work continues.
No payment card information has been exposed from RMS.
We will provide our next routine update by 9:00pm AEDT tonight, or sooner if there is a material change.
Please subscribe to this incident for automatic updates.
Oct 27, 2026 - 05:35 UTC
These messages are not being sent by RMS.
Our teams are actively investigating the activity and taking steps to contain it, protect customer information and support affected customers and integration partners. Some integrations may experience brief interruptions while this work continues.
No payment card information has been exposed from RMS.
We will provide our next routine update by 9:00pm AEDT tonight, or sooner if there is a material change.
Please subscribe to this incident for automatic updates.
Oct 27, 2026 - 05:35 UTC
Australia
Operational
RMS9+ (Live)
Operational
RMS 9+ (Release Candidate)
Operational
RMS9+ (Beta)
Operational
RMS REST API
Operational
RMS Online API
Operational
RMS Public API
Operational
RMS Channel Manager
Operational
RMS IBE
Operational
RMS ePOS
Operational
Reports
Operational
North America
Operational
RMS9+ (Live)
Operational
RMS 9+ (Release Candidate)
Operational
RMS9+ (Beta)
Operational
RMS REST API
Operational
RMS Online API
Operational
RMS Public API
Operational
RMS Channel Manager
Operational
RMS IBE
Operational
RMS ePOS
Operational
China
Operational
RMS9+ (Live)
Operational
RMS 9+ (Release Candidate)
Operational
RMS9+ (Beta)
Operational
RMS REST API
Operational
RMS Online API
Operational
RMS Public API
Operational
RMS Channel Manager
Operational
RMS IBE
Operational
Europe
Operational
RMS9+ (Live)
Operational
RMS 9+ (Release Candidate)
Operational
RMS9+ (Beta)
Operational
RMS REST API
Operational
RMS Online API
Operational
RMS Public API
Operational
RMS Channel Manager
Operational
RMS IBE
Operational
RMS ePOS
Operational
Modules
Operational
RMS SMS Module
Operational
MFI - Multi Function Interface
Operational
RMS Support
Operational
RMS Customer Support Telephone System
Operational
RMS Service Requests
Operational
RMSPAY
Operational
RMS Website
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.