CYBERATTACKS IN THE TOURISM INDUSTRY IN THE CONTEXT OF DIGITAL TRANSFORMATION: THREATS AND CHALLENGES TO CYBERRESILIENCE
Abstract
The tourism industry is undergoing significant transformations under the influence of digitalization, which includes the introduction of online platforms, booking systems, mobile applications, cloud services and digital payment instruments. Digital technologies provide increased accessibility of tourism services, personalization of offers and optimization of business processes, but at the same time significantly increase the level of vulnerability of tourism enterprises to cyberattacks. The accumulation of significant volumes of personal and payment data of tourists, the integration of numerous information systems and the involvement of external providers of digital services form a complex and potentially dangerous digital ecosystem of tourism. The article examines the impact of cyberattacks on the functioning of the tourism industry in the context of digital transformation. The essence of the concept of «cyberattack» in accordance with the legislation of Ukraine is revealed and the most famous examples of cyber incidents in the international tourism market are summarized. The main types of cyber threats, including phishing, social engineering, data breaches, ransomware attacks and supply chain compromise, are analyzed, and their consequences for various tourism business entities are identified. It is substantiated that cyber incidents cause not only direct financial losses, but also long-term reputational risks, disruption of the continuity of tourism services, and a decrease in consumer trust. Particular attention is paid to the problem of insufficient cyber resilience of small and medium-sized tourism enterprises, which are often the most vulnerable link in the digital tourism environment. Cyberspace is becoming significantly more complex and less predictable, which is caused by the accelerated implementation of new technologies, especially artificial intelligence and the Internet of Things. It is concluded that cybersecurity in modern tourism is not only a technical, but also a strategic management task, the solution of which is a necessary condition for the sustainable development and competitiveness of the tourism industry in the digital economy.
References
Горчак Р. Цифровізація внутрішнього туризму в Україні: стан, ініціатива та аналітика. Інновації та технології в сфері послуг і харчування. 2025. № 2 (16). С. 139-145. DOI: https://doi.org/10.32782/2708-4949.2(16).2025.22
Грабар М.В., Машіка Г.В., Кашка М.Ю., Пригара О.В. Концептуальні основи кібербезпеки сфери туризму та рекреації. Агросвіт. 2023. № 3-4. С. 43-48. DOI: https://doi.org/10.32702/2306-6792.2023.3-4.43
Дзяд О. В., Стародуб Д. С. Економічні втрати та механізми протидії кіберзлочинності у світовому господарстві. Ефективна економіка. 2022. № 1. DOI: https://doi.org/10.32702/2307-2105-2022.1.91
Закон України «Про основні засади забезпечення кібербезпеки України». URL: https://zakon.rada.gov.ua/laws/show/2163-19#Text (дата звернення 17.01.2026).
Стрижак О.О. Трансформації індустрії туризму в умовах цифрової економіки. Економіка та управління АПК. 2021. № 2. С. 41-49.
Руденко М. В., Кочума І. Ю., Кравченко О. О., Третяк Н. М. Інформаційна безпека у SMART-туризмі: управління ризиками, маркетингові стратегії, перспективи. Вісник Хмельницького національного університету. Серія: Економічні науки. 2024. № 2 (328). С. 351-359. DOI: https://doi.org/10.31891/2307-5740-2024-328-42
Airbnb and Get Safe Online raise awareness of holiday scams this Easter. URL: https://news.airbnb.com/en-uk/airbnb-and-get-safe-online-raise-awareness-of-holiday-scams-this-easter/ (дата звернення 27.01.2026).
Global Cybersecurity Outlook 2025. URL: https://reports.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2025.pdf (дата звернення 30.01.2026).
The new ways cybercriminals are attacking travel companies. URL: https://www.phocuswire.com/cybercriminals-find-new-ways-to-attack-travel-companies (дата звернення 17.01.2026).
Travel’s persistent cybersecurity problem, and why it could get worse. URL: https://www.phocuswire.com/cybersecurity-travel-data-online-threats
Tourism & Cybersecurity. URL: https://blog.httpcs.com/en/tourism-cybersecurity/ (дата звернення 29.01.2026).
Florido-Benítez L. Сybersecurity applied by on-line travel agencies and hotels to protect users' private data in smart cities. Smart Cities. 2024. vol. 7 (1). рр. 475-495. DOI: https://doi.org/10.3390/smartcities7010019
Horchak R. (2025) Tsyfrovizatsiia vnutrishnoho turyzmu v Ukraini: stan, initsiatyva ta analityka [Digitalization of domestic tourism in Ukraine: status, initiative and analytics] Innovatsii ta tekhnolohii v sferi posluh i kharchuvannia. vol. №2 (16), рр. 139-145. DOI: https://doi.org/10.32782/2708-4949.2(16).2025.22 (in Ukrainian)
Hrabar M. V., Mashika H. V., Kashka M. Yu. & Pryhara O. V. (2023) Kontseptualni osnovy kiberbezpeky sfery turyzmu ta rekreatsii [Conceptual foundations cyber security of tourism and recreation]. Ahrosvit. vol. 3-4, pp. 43-49. DOI: https://doi.org/10.32702/2306-6792.2023.3-4.43 (in Ukrainian)
Dzyad, O. and Starodub, D. (2022) Ekonomichni vtraty ta mekhanizmy protydii kiberzlochynnosti u svitovomu hospodarstvi. Efektyvna ekonomika [Economic losses and international methods against cybercrimes and ways to oppose cybercrimes worldwide] Efektyvna ekonomika. vol. 1. DOI: https://doi.org/10.32702/2307-2105-2022.1.91 (in Ukrainian)
Zakon Ukrainy «Pro osnovni zasady zabezpechennia kiberbezpeky Ukrainy» [Law of Ukraine «On the basic principles of ensuring cybersecurity of Ukraine»]. Available at: https://zakon.rada.gov.ua/laws/show/2163-19#Text (аccessed January 17, 2026).
Stryzhak O.O. (2021) Transformatsii industrii turyzmu v umovakh tsyfrovoi ekonomiky [Transformations of the tourism industry in the digital economy]. Ekonomika ta upravlinnia APK. vol. 2. рр. 41-49. (in Ukrainian)
Rudenko M. V., Kochuma I. Yu., Kravchenko O. O., Tretiak N. M. (2024) Informatsiina bezpeka u SMART-turyzmi: upravlinnia ryzykamy, marketynhovi stratehii, perspektyvy [Information security in SMART tourism: risk management, marketing strategies, prospects]. Visnyk Khmelnytskoho natsionalnoho universytetu. Seriia: Ekonomichni nauky. vol. 2 (328). рр. 351-359. DOI: https://doi.org/10.31891/2307-5740-2024-328-42 (in Ukrainian)
Airbnb and Get Safe Online raise awareness of holiday scams this Easter. Available at: https://news.airbnb.com/en-uk/airbnb-and-get-safe-online-raise-awareness-of-holiday-scams-this-easter/ (аccessed January 27, 2026).
Global Cybersecurity Outlook 2025. Available at: https://reports.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2025.pdf (аccessed January 30, 2026).
The new ways cybercriminals are attacking travel companies. Available at: https://www.phocuswire.com/cybercriminals-find-new-ways-to-attack-travel-companies (аccessed January 19, 2026).
Travel’s persistent cybersecurity problem, and why it could get worse. Available at: https://www.phocuswire.com/cybersecurity-travel-data-online-threats
Tourism & Cybersecurity. Available at: https://blog.httpcs.com/en/tourism-cybersecurity/ (аccessed January 29, 2026).
Florido-Benítez L. (2024) Сybersecurity applied by on-line travel agencies and hotels to protect users' private data in smart cities. Smart Cities. vol. 7 (1). рр. 475-495. DOI: https://doi.org/10.3390/smartcities7010019
Copyright (c) 2026 М.В. Грабар

This work is licensed under a Creative Commons Attribution 4.0 International License.

