At least one hotel near Disneyland was hacked earlier this week which resulted in guests receiving deceiving texts asking for personal information. We collected all the details on the timeline of the hack and what to look out for.
This hack has for sure happened at one hotel with a cult following just a block from the entrance to Disneyland. Mickey Visit brings you the latest Disney news and planning resources, including a new Taylor Swift song added to a ride and Disneyland changes in a Halloween to holidays transition.
READ MORE – Don’t Waste Your Lightning Lane On This Popular Disneyland Ride
Hotel Near Disneyland Hacked and Guest Information Leaked
Earlier this week, the Candy Cane Inn was hacked and reservation details were compromised. We reached out to the hotel for details. When we reached out, the hotel shared that others in Anaheim were also impacted this week via a Booking.com hack, but we haven’t found any evidence of that besides the previous April 2026 Booking.com breach.
Disney Ride Closure ALERTS, Major Changes, Secrets Revealed
Get alerts on closures, park changes, exclusive discounts, and free printables. Trusted by 100,000+ Disney fans & planners.
In the Candy Cane Inn hack this week, all information besides credit cards was compromised. This means guest names, contact information, hotel dates, and hotel reservation number. Now, hackers are using the information to reach out to guests via Whatsapp text with a link that asks for credit card information. Credit cards were not accessed in the initial hack because the numbers are tokenized in their system.
The WhatsApp messages include guest confirmation number and hotel information and a link to update your credit card information. If you receive a message, you should contact the hotel right away.
The hotel said they are actively trying to alert hotel guests, though no posts have been made on their Facebook or Instagram publicly that I could see as of Saturday, September 26. They are also working with the hotel website provider to understand what could have allowed for the hack and at one point took the system down to run security tests. The hotel booking engine runs on Webrez.
The Candy Cane Inn is the only prime hotel near Disneyland that famously works with no third parties whatsoever to promote the property. There is no ability to book the property through anyone besides the direct channels.
For years, they have successfully relied on delivering top tier customer service, consistent hotel upgrades, and a legacy of people loving their hotel to fill rooms. They have put little focus on web pressence or resellers and instead focused on the hotel experience. The fact that they have avoided the marketing expenses means that they can keep guest costs down. However, it also could have contributed to the fact that they are running on an older reservations system that is more easily hacked.
The incident was first shared in our Facebook group and then again on Reddit. In those posts, we got additional details about the situation.
Here’s the description from the Reddit post:
“What made it convincing was that the message contained her full name, the correct hotel, our exact arrival and departure dates and our genuine reservation reference. The message came from a +57 number. We’re from the UK and, at the time, didn’t realise +57 was Colombia rather than a US number, so that didn’t immediately set off alarm bells for us. It then sent her to a website to “confirm” the booking and said no payment would be taken. Unfortunately she entered her card details before we realised something wasn’t right. Our bank then triggered a scam warning and we immediately froze the cards and have now had to arrange replacements.”
They stated that the link went to a “fetch-status dot com” address.
If you run into this issue, make sure to report it to the hotel and click spam on the message. Please comment if you have any additional details on the hack or if you encounter any other Anaheim hotels impacted.
Don’t Miss the Latest Disney News
Don’t miss the latest Disneyland and Disney World news from Mickey Visit. Join the FREE Mickey Visit newsletter that over 100k readers receive every single week. Mickey Visit is here to help you save money and experience more during your Disney and Universal vacation. See the Mickey Visit guide to Disneyland and the Mickey Visit guide to Disney World for tips.
