Thailand’s data watchdog has raised its highest cyber warning after scammers used leaked Booking.com reservation details to impersonate hotels and demand urgent payments.