Hospitality breaches

198 breaches

CCChevy Chase ClubExposed names and Social Security numbers. Reported to the Indiana AG.7,585 affectedUSOct 19WHWaterford Hotel Group LLC & LMD HoldingBreach notice filed with the Indiana AG, details not stated.22K affectedUSSep 25WHWaterford Hotel Group, LCC & LMD HoldingExposed names, Social Security numbers, government IDs, health records, payment cards and financial details. Reported to the Vermont AG.USSep 25WAWend America GroupExposed names, Social Security numbers, government IDs, health records, payment cards, financial details and biometric data. Reported to the Vermont AG.USSep 1SMShuttle Meadow County ClubExposed names and Social Security numbers. Reported to the Vermont AG.USAug 28OEOcean Edge Resort and Golf ClubExposed names, Social Security numbers, government IDs and health records. Reported to the Indiana AG.USAug 25AAApple American Group LLC and Apple American Group IIRansomware exposed names, Social Security numbers, government IDs, health records, payment cards, financial details, biometric data and insurance details. Reported to the California AG.Ransomware283K affectedUSAug 18MCMaine Course Hospitality GroupExposed names, Social Security numbers, government IDs and health records. Reported to the Indiana AG.7,194 affectedUSJul 31CCasinoExposed Social Security numbers, government IDs, health records, payment cards, financial details and names. Reported to the California AG.26K affectedUSJun 10TMTaos Mountain CasinoBreach notice filed with the Indiana AG, details not stated.4,099 affectedUSJun 9DNDelaware NorthExposed Social Security numbers, names and government IDs. Reported to the Indiana AG.66K affectedUSJun 5BCD TravelExtortion exposed emails, employment records, names, phone numbers and addresses.Extortion396K accountsUnverifiedJun 5IMInterstate ManagementExposed Social Security numbers, health records, insurance details, payment cards, financial details and names. Reported to the California AG.23K affectedUSMay 26SCStation CasinosExposed names and Social Security numbers. Reported to the California AG.44K affectedUSMay 21VMVacation Myrtle BeachExposed names, Social Security numbers, health records, payment cards and financial details. Reported to the Indiana AG.USMay 15RReqreaHotel check-in startup left over 1 million passports and IDs in open bucketExposed dataJPUnverifiedMay 15CarnivalPhishing exposed names, government IDs, dates of birth, emails, location data and addresses. Reported to the California AG.Phishing6.0M affectedUSApr 24BPBeach PropertiesExposed names, Social Security numbers, government IDs, payment cards and financial details. Reported to the Indiana AG.3,150 affectedUSApr 20Booking.comHacking exposed names, emails and phone numbers.HackingNLUnverifiedApr 13Wynn ResortsExtortion exposed Social Security numbers, employment records, names, dates of birth and addresses. Reported to the California AG.Extortion22K affectedUSFeb 24Washington HotelJapan's Washington Hotel chain discloses ransomware infection of serversRansomwareJPFeb 16BRBrett Robinson Vacation RentalsBreach notice filed with the Indiana AG, details not stated.3,935 affectedUSJan 7SSSouth Seas ResortBreach notice filed with the Indiana AG, details not stated.USDec 4, 2025SHSummit Hotel PropertiesBreach notice filed with the Indiana AG, details not stated.168 affectedUSNov 21, 2025LHLowell Hotel PropertiesBreach notice filed with the Indiana AG, details not stated.905 affectedUSSep 24, 2025CBChristopherson Business TravelBreach notice filed with the Indiana AG, details not stated.289 affectedUSMay 9, 2025MTMusic Travel ConsultantsBreach notice filed with the Indiana AG, details not stated.63 affectedUSApr 23, 2025AEAmerican Express Travel Related ServicesBreach notice filed with the California AG, details not stated.USApr 23, 2025Legends InternationalVenue operator Legends International discloses November 2024 breachHacking10K affectedUSApr 15, 2025RDResort Data ProcessingBreach notice filed with the Indiana AG, details not stated.6,556 affectedUSMar 20, 2025WHWatergate HotelBreach notice filed with the Indiana AG, details not stated.2,200 affectedUSFeb 7, 2025OtelierHackers steal hotel guest data from Otelier cloud storageHacking437K accountsUSUnverifiedJan 17, 2025RCRivers Casino PhiladelphiaRansomware, data exposed not stated. Reported to the California AG.Ransomware8,151 affectedUSDec 30, 2024CHCharmant HotelBreach notice filed with the Indiana AG, details not stated.1,072 affectedUSDec 26, 2024PTPreferred Travel GroupBreach notice filed with the California AG, details not stated.USNov 6, 2024RRRiverside Resort & CasinoRansomware, data exposed not stated. Reported to the California AG.RansomwareUSSep 5, 2024BTBrownell TravelBreach notice filed with the California AG, details not stated.USJul 31, 2024BRBeaver Run Resort & Conference CenterBreach notice filed with the Indiana AG, details not stated.1,280 affectedUSMay 16, 2024SHSynergy HotelBreach notice filed with the Indiana AG, details not stated.9,211 affectedUSApr 24, 2024Omni Hotels & ResortsRansomware attack on Omni Hotels exposes guest personal dataRansomwareUSUnverifiedApr 14, 2024DHDavidson HotelBreach notice filed with the Indiana AG, details not stated.146 affectedUSFeb 22, 2024ISIndigo Sky Casino and Resort and Outpost CasinoBreach notice filed with the Indiana AG, details not stated.18K affectedUSJan 10, 2024RDResort Data ProcessingHacking, data exposed not stated. Reported to the California AG.Hacking62K affectedUSOct 27, 2023CTCWT Travel - Progress Software MOVEitBreach notice filed with the Vermont AG, details not stated.USSep 22, 2023CTCWT TravelBreach notice filed with the Indiana AG, details not stated.2,773 affectedUSSep 22, 2023Caesars EntertainmentSocial engineering of IT vendor leads to theft of Caesars Rewards loyalty databasePhishingUSSep 14, 2023MGM ResortsSocial engineering and ransomware attack disrupts MGM casinos and steals customer dataRansomwareUSSep 12, 2023BTBCD Travel USABreach notice filed with the Indiana AG, details not stated.3,000 affectedUSAug 11, 2023FFFontainebleau Florida HotelBreach notice filed with the Vermont AG, details not stated.USMay 11, 2023CBCrystal Bay CasinoRansomware, data exposed not stated. Reported to the California AG.Ransomware86K affectedUSFeb 24, 2023