Otelier
Disclosed Jan 17, 20251 year ago436,855 accountsUnverified
Hackers steal hotel guest data from Otelier cloud storage
Hotel data platform Otelier confirmed attackers accessed its Amazon S3 storage between July and October 2024 and took guest data and reservations for brands including Marriott and Hilton; Have I Been Pwned found 1.3 million unique email addresses in the data.
What is known
| People affected | 436,855 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 17, 2025 |
| Happened | Jul 1, 2024 |
| Attack | Hacking |
| Data exposed | Emails, Names, Payment cards, Phone numbers, Addresses, Financial, Other |
| Sector | Hospitality · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Otelierhaveibeenpwned.com · Aggregator | Aggregator |
| Otelier data breach exposes info, hotel reservations of millionsbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 17, 2025 | |
| Have I Been Pwnedaccounts in the data | Jan 18, 2025 | 436,855 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Otelier to https://www.bleepingcomputer.com/news/security/otelier-data-breach-exposes-info-hotel-reservations-of-millions/ · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to hospitality · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · data_types: ["emails","names","payment-card","phone","addresses","financial"] to ["emails","names","payment-card","phone","addresses","financial","other"] · seed source
- 2026-09-25 · disclosed: 2025-01-18 to 2025-01-17 · seed source
- 2026-09-25 · summary: In July 2024, a threat actor gained access to the hotel management platform Otelier and retrieved customer data from well-known hotel brands including Marriott, Hilton, and Hyatt . The data included 437k customer email addresses (a further to Hotel data platform Otelier confirmed attackers accessed its Amazon S3 storage between July and October 2024 and took guest data and reservations for brands including Marriott and Hilton; Have I Been Pwned found 1.3 million unique email add · seed source
- 2026-09-25 · title: empty to Hackers steal hotel guest data from Otelier cloud storage · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.