A data breach at RedCat Pub Company (affecting the Wherry Hotel in Oulton Broad) exposed customer details, including those of Marie Blowers, who later received a fraudulent WhatsApp message impersonating hotel staff. The scam requested her bank details under the guise of a 'standard security check,' threatening booking cancellation if unfulfilled. The breach was confirmed by the company, which admitted unauthorized access to limited customer data stored on a third-party system. However, affected individuals, including elderly and vulnerable customers like Ms. Blowers, were not promptly notified—some only learning of the incident a month later through family intervention. The delay in communication heightened anxiety and left customers exposed to phishing attempts exploiting the leaked data. While the company claimed to have contacted customers via available channels, many, including Ms. Blowers, never received direct notification. The breach enabled scammers to target victims with tailored fraud schemes, leveraging trust in the hotel’s brand.