HomeToGo Discloses Cyberattack on Channel Manager Subsidiary SECRA Bookings

Property managers who use SECRA Bookings for channel management should watch for a notice from the company. HomeToGo SE disclosed late on 24 October that SECRA, its channel management software subsidiary, was hit by a cyberattack involving unauthorized access to customer data and personally identifiable information.

The disclosure was an ad-hoc release under Article 17 of the EU Market Abuse Regulation, distributed at 23:44 CET/CEST. The headline refers to data exfiltration, while the text itself describes unauthorized access.

What HomeToGo says

• The incident appears isolated to SECRA, based on current findings.
• SECRA began containment right after discovery, working with HomeToGo SE and HomeToGo GmbH to secure and isolate the affected systems. The initial containment steps are complete.
• Investigations so far found no evidence of data exfiltration from systems run by HomeToGo SE or other group companies.
• The financial impact on the group cannot yet be reliably quantified.

Next steps

HomeToGo says it will shortly notify the competent data protection supervisory authority, and is preparing notifications to affected parties, to be sent without undue delay. The release gives no figures on how many customers or records are affected, and does not say what kinds of data were involved beyond customer data and personal information.