Business email incepted & client received incorrect banking details

On 04 April 2023 I phoned the hotel due to the fact that on Bookings.com it showed that no rooms were available for my booking date of 29 April 2023 check in & check out on 01 May 2023. I was advised that I needed to send an email with all the relevant details pertaining to my booking & was provided with an email address. I later sent the email with all the relevant information. The following day when I checked my emails I noticed the hotel had sent me an invoice from their email address. I called the hotel to speak to the person who sent me the invoice & she confirmed the name of the account as it was different to the hotel name. She confirmed that everything was correct. Payment was made & proof of payment emailed back to the hotel. On Friday 28 April 2023 I received a phone call from the hotel asking me if I am still staying at the hotel & what time will I be arriving. At this point it came to light that the hotel did not receive my payment. Lots of calls & emails were sent back & forth between the hotel & myself only to find out that the bank account number was changed. A ***** case was opened with the relevant banks. I had to pay again for my reservation with the Regal Inn in Umhlanga. As a business surely there should be some sort of insurance against cyber ***** which I what I believe happened. The Regal Inn emails was intercepted & that is how I received an invoice with all the correct information regarding my booking but with a different bank account number inserted. To date I have received no compensation from the Regal Inn in Umhlanga. I have been advised that it is now a police matter. I am extremely unhappy because I received this email from the Regal Inn so how was I to know that someone changed just the bank account number?