Important Guest Security Notice
11 November 2026
We have been informed by our third-party booking system provider, SuperControl, that they are investigating a security incident involving unauthorised activity on parts of their platform, which may have resulted in unauthorised access to customer booking information.
If you receive a WhatsApp message from someone claiming to be Camp de Reves, please know these messages are not being sent by us and should be treated as fraudulent.
To read the most recent update from SuperControl, please scroll to the bottom of the page.
Have you received a suspicious message?
If you receive a WhatsApp message about your booking:
Do not click on any links contained within the message.
Do not provide payment details, passwords or personal information.
Do not make any additional payments requested via WhatsApp.
Do not follow instructions to verify or reactivate your booking through an unfamiliar link.
If you are unsure whether a message is genuine, contact us directly using the details published on this website.
If you have received a suspicious WhatsApp message relating to a Camp de Rêves booking, please email us at enquiries@guernseyglamping.com.
We would be very grateful if you could include screenshots of the full message, including the sender’s telephone number and any links provided. This will allow us to report the messages and share the evidence directly with our booking system provider as part of their ongoing investigation.
Please do not click on any links or respond to the sender.
Thank you for your understanding, vigilance and cooperation while this matter is investigated.
How will Camp de Reves contact guests?
We will never contact you via WhatsApp. We will never request additional payments, card details or booking verification via WhatsApp.
If we need to contact you regarding your booking, we will use our usual communication channel of email from enquiries@guernseyglamping.com and will always be happy to verify any communication if you have concerns.
Your existing reservation remains as arranged. You do not need to complete any additional verification as a result of these fraudulent messages.
What information may have been affected?
SuperControl has confirmed that an unauthorised third party gained access to its application and was able to access certain guest reservation information.
The information contained within the affected dataset may have included:
Guest details: First and last names, email addresses, telephone/mobile numbers and postal addresses, where held.
Booking details: Stay dates and other information relating to reservations.
SuperControl has confirmed that no guest payment information was contained within the affected dataset.
Please note that not every category of information was affected for every customer or booking. At this stage, we have not been provided with confirmation of exactly which individual bookings or guest records may have been accessed.
What is happening now?
SuperControl has taken steps to contain the unauthorised activity and has continued its investigation with the support of independent cyber security specialists. It has confirmed that no evidence of ongoing unauthorised activity has been identified, although monitoring remains ongoing.
The incident has been referred to Police Scotland and Report Fraud. We continue to liaise with SuperControl and will share any further relevant updates as they become available.
If you have any concerns or have received a suspicious message relating to a booking, please contact us directly and we will be happy to help.
Thank you for your understanding.
The Camp de Reves Team
Email: enquiries@guernseyglamping.com
Phone: +44 (0)7781 415640 (Jane Barnes)
+44 (0)7781 102546 (Danny Barnes)
SuperControl Incident update - 10 November
As promised, we are writing with a further update on our investigation into the security incident and the fraudulent communications being sent to guests.
Our forensic investigation has now enabled us to establish more clearly what happened and the information involved.
What our investigation has established
Our investigation has established that an unauthorised third party gained access to the SuperControl application through a compromised account and was able to access certain reservation information.
SuperControl took steps to contain the activity and has continued to investigate the incident with the support of independent cyber security specialists. We have not identified evidence of ongoing unauthorised activity, monitoring remains ongoing.
What information was affected
Our forensic investigation has now enabled us to confirm the categories of information contained within the affected dataset. Not every category of information was affected for every customer or booking. The information included:
Guest information: first and last name, email address, telephone/mobile number and, where held, postal address.
Booking information: stay dates and other related booking information.
No guest payment information was contained within the dataset.
Action we have taken
We continue to monitor the SuperControl environment and take appropriate action in response to the fraudulent communications being sent to guests.
Guests may nevertheless continue to receive messages using information obtained previously. The receipt of a further fraudulent message does not necessarily indicate further unauthorised activity within SuperControl.
The matter has been referred to Police Scotland and Report Fraud. The associated reference number is: RF26110485980C.
What to do if you or a guest receives a fraudulent WhatsApp message
SuperControl does not use WhatsApp as an endorsed communications channel. If you or a guest receives an unexpected WhatsApp message relating to a booking, payment, or verification:
- Do not click links, make payments or provide personal or financial information.
- Report and block the sender within WhatsApp. Meta provides information on reporting suspicious accounts and messages and blocking contacts on WhatsApp: Scam Protection Center | Meta
- Verify any booking or payment request independently using contact details you already know and trust, rather than those contained in the message.
- If money has been transferred or financial details disclosed, contact the relevant bank or payment provider promptly using trusted contact details and monitor the account for suspicious transactions. The FCA advises consumers who have disclosed financial information to fraudsters to tell their bank immediately: Money transfer scams
- Report fraud where appropriate. In England, Wales and Northern Ireland, fraud can be reported through Report Fraud. Those in Scotland should report through Police Scotland by calling 101: UK’s Home for Reporting Cyber Crime & Fraud – Report Fraud
Please share this information with any guests who report receiving a suspicious message.
Thank you for your continued patience and cooperation throughout this process.
Kind regards,
The SuperControl Team