Cybersecurity Risks Surge in Travel and Tourism Industry

The travel and tourism industry faces escalating cybersecurity threats due to rapid technological advancements, including AI and interconnected booking systems. This progress, however, dramatically increases the attack surface, making travel companies prime targets for cybercriminals and state-backed actors.

Data Breach Costs Reach Millions

According to the Ponemon Institute, the average cost of a data breach in EMEA – specifically the Middle East ($7.29 million), the Benelux countries ($6.24 million), and the United Kingdom ($4.14 million) – is significantly high. Within the sector, hotel breaches average $4.03 million, while transportation breaches average $3.98 million, with transportation now accounting for 11% of all cyberattacks in Europe.

AI: A Double-Edged Sword

While AI offers valuable tools for detecting threats, attackers are leveraging it for sophisticated social engineering campaigns. A recent KnowBe4 report indicates that 86% of phishing attacks are now AI-powered. The World Economic Forum identifies AI as the most significant driver of change in the threat landscape.

Key Attack Vectors

Current threats include reservation hijacking (using ClickFix techniques), malware disguised as updates, and double-extortion ransomware, which can shut down entire hotels. Fragmented supply chains and geopolitical tensions further exacerbate vulnerabilities, with smaller suppliers often lacking adequate security resources.