Cybersecurity is now emerging as a critical factor for tourism, as travelers’ trust is becoming the new currency of luxury. Dimitris Georgiou, head of Alphabit Cybersecurity, speaks to Tornos News about how data security is linked to the hospitality experience, why tourism is one of the most vulnerable sectors to cyberattacks and how Greece can evolve into a “cyber-resilient” tourism model. As he points out, trust is not bought with technology, but is built through knowledge, consistency and education.
How is cybersecurity linked to the concept of luxury in tourism?
In tourism, luxury is not only about the environment, cleanliness, gastronomy or service, it is about the sense of security. When a customer makes an online reservation, uses their card, connects to the hotel’s Wi-Fi or scans the QR code of the Guest Directory, they are trusting the business with personal and financial information. Protecting that trust is the most valuable element of the luxury experience today.
Why is the tourism industry one of the most vulnerable targets for cyberattacks?
Tourism is “data-rich”. Businesses manage a huge amount of personal and financial information, while operating in an environment with many suppliers, subcontractors and connected systems. This creates multiple attack surfaces. Criminals know that even a few hours of downtime means huge financial damage, so businesses are more likely to pay ransom to get back up and running quickly. We saw this in 2023 with the ransomware incidents at MGM Resorts and Caesar’s Las Vegas, where operations were halted for days and losses were in the millions. Similar incidents can affect units of any size, anywhere in the world.
How important is the human factor in the cybersecurity of tourism businesses?
It is decisive. 90% of incidents begin with human error. In a Greek hotel unit, the accounting department received a message that appeared to come from the unit’s Director, requesting an urgent payment to a supplier. The employee, having attended a cybersecurity seminar, suspected that something was wrong. After an inspection, an organized BEC (Business Email Compromise) fraud attempt was revealed. Thanks to awareness and immediate response, the loss of tens of thousands of euros was avoided. Technology is essential, but without staff training, it remains incomplete.
Can security be combined with the hospitality experience? Are there any examples?
Of course. A typical example is the smart management of Wi-Fi. In a large resort, a network was designed with separation between guests, staff and critical systems via VLANs. Guests were connected with a personalized identity and secure, isolated access, while a firewall blocked known malicious IP addresses. The result was a faster, more stable and secure Wi-Fi, which added value to the hospitality experience and protected the hotel and guests. Security can and should function as an experience tool.
What is the role of specialized cybersecurity companies in tourism and how can they help businesses “shield themselves”?
Security requires constant surveillance and specialized knowledge. Companies like Alphabit Cybersecurity help tourism businesses implement preventive measures, monitor threats through a Security Operations Center (SOC), train staff and ensure compliance with international standards. ISO 27001 and ISO 27701 lay the foundations for a comprehensive information security management system, while PCI DSS specifically concerns businesses that process card data. These standards are not bureaucracy, but proof of maturity and reliability that prevents risks and instills trust.
What is the message you want to send to tourism entrepreneurs about the future of cybersecurity?
Cybersecurity is not a cost, it is an investment in trust. Data security is not seen, but experienced. A hotel that protects customer information creates an environment where the visitor feels calm, and this calmness is a luxury. Greece has the potential to become a model of “cyber-resilient” tourism. With the right strategy, investment and education, we can build an industry that offers not only hospitality, but also trust on an international level. Whoever understands this early will be ahead.
