Vacationers ignore ‘a very high concrete threat’ of attacks