Updated 11 Nov 2026
Important: If you receive an unexpected WhatsApp message regarding your booking, do not click any links or provide payment information.
If you are unsure whether a communication is genuine, please contact Irish Landmark Trust directly on +353 1 670 4733 or bookings@irishlandmark.com.
Irish Landmark Trust has been informed of a cybersecurity incident affecting our booking software provider, SuperControl.
On Sunday 1 November, SuperControl identified unauthorised activity affecting parts of its platform through which guest and booking information can be accessed. SuperControl’s investigation has since established that an unauthorised third party gained access through a compromised account and was able to access certain reservation information.
We have since been informed that some guests have received fraudulent messages containing accurate details relating to their Irish Landmark Trust reservations. These communications have primarily been sent via WhatsApp, although guests should remain cautious of unexpected emails, texts or phone calls relating to their booking.
SuperControl has engaged independent cybersecurity specialists and legal advisers and continues to investigate the incident. According to the latest information provided, containment measures were implemented promptly and no evidence of ongoing unauthorised activity has been identified.
Importantly, SuperControl has confirmed that no payment card information was contained within the affected dataset. Payment information is processed and stored separately using a secure tokenised payment system and is not accessible through the booking platform.
Even if you have not received a suspicious message, we recommend remaining vigilant. SuperControl has not been able to confirm exactly which bookings were affected.
As a precaution, we are sharing this information with guests to help them recognise and avoid fraudulent communications.
Frequently Asked Questions
What happened?
SuperControl has confirmed that an unauthorised third party gained access to part of its platform through a compromised account and was able to access certain reservation information.
Some guests have since received fraudulent messages relating to their reservations, including messages containing accurate Irish Landmark Trust booking details.
What information may have been affected?
SuperControl has confirmed that the affected information may have included:
- Guest details: first and last name, email address, phone number and, if held, postal address.
- Booking details: stay dates, price, and other information about the booking.
Not every category of information was affected for every guest or booking.
No payment or card information was accessed.
Were payment card details affected?
No.
SuperControl has confirmed that no guest payment card information was contained within the affected dataset.
Payment information is processed and stored separately using a secure tokenised payment system and is not accessible through the booking platform.
Has the issue been contained?
SuperControl has advised that containment measures were implemented immediately after the unauthorised activity was identified.
According to the latest information provided, no evidence of further unauthorised activity has been identified. Monitoring and investigation activities remain ongoing.
Guests may nevertheless continue to receive messages using information obtained previously. The receipt of a further fraudulent message does not necessarily indicate further unauthorised activity within SuperControl.
Has this incident been reported?
Yes.
Irish Landmark Trust has reported the matter to:
- The Data Protection Commission (DPC)
- The Information Commissioner’s Office (ICO)
- An Garda Síochána
SuperControl has also referred the matter to Police Scotland and Report Fraud.
We will continue to cooperate fully with the relevant authorities and regulators.
What should I do?
You do not need to take any immediate action.
However, we recommend that you remain vigilant and treat unexpected communications relating to bookings, payments or verification requests with caution.
Reminder
- Irish Landmark Trust will never contact you via WhatsApp to confirm a booking or request payment details, banking information, passwords, security codes or verification codes.
- SuperControl does not use WhatsApp as an endorsed communications channel.
- If you receive an unexpected WhatsApp message, email, text message or phone call relating to a booking, payment or verification request, do not respond, click links, make payments or provide personal or financial information.
- Report and block suspicious WhatsApp senders whenever possible.
- If you entered payment information into a link received through a suspicious message, contact your card provider or bank immediately.
- Always verify unexpected requests using contact details you already know and trust, rather than those provided within a message.
How can I verify a communication?
If you are unsure whether a communication is genuine, please contact us directly:
Email: bookings@irishlandmark.com
Phone: +353 1 670 4733
Opening Hours: Monday to Friday, 9.15am–1.00pm and 2.00pm–5.00pm
Always use verified contact details that you already know and trust for any enquiries relating to your booking.
In the lead-up to your stay, we will provide you with your House Manager’s contact details. Your House Manager may contact you directly regarding access arrangements and practical information for your visit. You will receive their contact information in advance so that you can verify any communication.
What if I clicked a link?
If you clicked a link but did not provide any personal or payment information, no further action is currently required.
If you provided payment information, banking details or other sensitive information, you should:
- Contact your bank or card provider immediately
- Ask them to block, replace or monitor any affected cards as appropriate
- Review your accounts for unusual activity
- Report the matter to An Garda Síochána, or your local police service, if you believe you may have been the victim of fraud
If possible, please send us screenshots or any other relevant information so that we can assist with ongoing investigations.
Will Irish Landmark Trust provide updates?
Yes. We will continue to update this page as further information becomes available from SuperControl.
Why am I receiving this notification if I have not received a suspicious message?
SuperControl has advised that it has not been possible to determine exactly which bookings were affected.
As a precaution, we are sharing this information with all guests and encouraging everyone to remain vigilant for suspicious communications relating to their reservation.
