B&B Hotels Brasil hereby informs that it has been notified by TOTVS S.A., the operator of its reservation management system, regarding a security incident that occurred on February 11, 2026. This incident may have involved the unauthorized viewing of guest reservation data by a third party for a short period.
The potentially affected data includes: name, phone number, email, check-in and check-out dates, and reservation number. No financial data (including credit card details), passwords, identification documents, or sensitive data were exposed.
According to TOTVS, no significant risks to the data subjects were identified. Nevertheless, as a precaution, we recommend staying vigilant against potential fraud attempts (phishing) that may use reservation details to simulate legitimate communications.
B&B Hotels does not request payments, card details, or passwords via WhatsApp, email, or telephone. For further details, please contact our Data Protection Officer (DPO) at: lgpdbrasil@hotelbb.com
B&B Hotels continues to implement measures to strengthen the security of its systems and those of its providers.