Every public data breach

44 disclosed this week · 26,355 on record

Otelier

Disclosed Jan 17, 2025436,855 accountsUnverified

Hackers steal hotel guest data from Otelier cloud storage

Hotel data platform Otelier confirmed attackers accessed its Amazon S3 storage between July and October 2024 and took guest data and reservations for brands including Marriott and Hilton; Have I Been Pwned found 1.3 million unique email addresses in the data.

What is known

People affected436,855 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJan 17, 2025
HappenedJul 1, 2024
AttackHacking
Data exposedEmailsNamesPayment cardsPhone numbersAddressesFinancialOther
SectorHospitality · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
source_type2026-09-25
aggregator to pressby seedSource
source_url2026-09-25
https://haveibeenpwned.com/Breach/Otelier to https://www.bleepingcomputer.com/news/security/otelier-data-breach-exposes-info-hotel-reservations-of-millions/by seedSource
country2026-09-25
empty to USby seedSource
sector2026-09-25
tech to hospitalityby seedSource
attack2026-09-25
unknown to hackingby seedSource
data_types2026-09-25
["emails","names","payment-card","phone","addresses","financial"] to ["emails","names","payment-card","phone","addresses","financial","other"]by seedSource
disclosed2026-09-25
2025-01-18 to 2025-01-17by seedSource
summary2026-09-25
In July 2024, a threat actor gained access to the hotel management platform Otelier and retrieved customer data from well-known hotel brands including Marriott, Hilton, and Hyatt . The data included 437k customer email addresses (a further to Hotel data platform Otelier confirmed attackers accessed its Amazon S3 storage between July and October 2024 and took guest data and reservations for brands including Marriott and Hilton; Have I Been Pwned found 1.3 million unique email addby seedSource
title2026-09-25
empty to Hackers steal hotel guest data from Otelier cloud storageby seedSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Otelier