Privacy Unpacked

Sector

Data breaches in travel and hospitality

51 organisations in travel and hospitality with a confirmed or reported breach on the tracker, newest first.

Last 30 days
14
2026 so far
34
On record
51
Median days to tell
137

From the day a breach began to the day it was first reported, a median of 137 days, over the 26 breaches in this sector whose notice gives a start date.

What was taken most often

  • Names20
  • ID numbers17
  • Phone numbers10
  • Email addresses9
  • Card and bank details8
  • Health information6

The number of breaches in which each kind of data was exposed.

The largest

  1. Vietnam AirlinesCountry being checked · 11 October 2025 Email addressesPhone numbersDates of birth+2 7.3Maccounts
  2. Club TourismreportedJPJapan · 31 October 2026 Email addressesPhone numbersDates of birth+6 4.3Mrecords
  3. Rakuten TravelJPJapan · 26 October 2026 Financial account and card detailsEmail addressesPhone numbers+5 2.6Mcustomers
  4. BCD TravelCountry being checked · 5 June 2026 Email addressesPhone numbersNames+4 396.3Kaccounts
  5. Casinos AustriareportedATAustria · 7 November 2026 Email addressesNamesPurchase details+1 150Kcustomers

Every breach, newest first

  1. Thai AirwaysreportedTHThailand · 10 November 2026 Passport numbersEmail addressesPhone numbers+5 –not reported
  2. Hotel KoldingfjordreportedDKDenmark · 8 November 2026 Financial account and card detailsNamesContact information 1customers
  3. Aalbæk BadehotelreportedDKDenmark · 8 November 2026 Personal information –not reported
  4. Hotel TønderhusDKDenmark · 7 November 2026 Email addressesPhone numbersNames 4Kguests
  5. Casinos AustriareportedATAustria · 7 November 2026 Email addressesNamesPurchase details+1 150Kcustomers
  6. Singapore AirlinesNONorway · 4 November 2026 Passport numbersNamesTravel routes 46Kpassengers
  7. L'office de tourisme de StrasbourgreportedFRFrance · 2 November 2026 Email addressesPhone numbersNames –not reported
  8. Club TourismreportedJPJapan · 31 October 2026 Email addressesPhone numbersDates of birth+6 4.3Mrecords
  9. All Nippon AirwaysreportedJPJapan · 30 October 2026 Passport numbersPhone numbersNames+5 37.8Kcustomers
  10. Hong Kong AirlinesreportedHKHong Kong SAR China · 28 October 2026 Customer data 1.6Kcustomers
  11. Japan AirlinesreportedJPJapan · 28 October 2026 Passport numbersNamesReservation numbers+3 92Kpeople
  12. Cathay Pacific AirwaysHKHong Kong SAR China · 28 October 2026 Email addressesPhone numbersBooking references+7 53Krecords
  13. Rakuten TravelJPJapan · 26 October 2026 Financial account and card detailsEmail addressesPhone numbers+5 2.6Mcustomers
  14. Martini Hotel GroupreportedNLNetherlands · 16 October 2026 Phone numbers 15guests
  15. Waterford Hotel Group LLC & LMD HoldingUSUnited States · 25 September 2026 22Kpeople
  16. Waterford Hotel Group, LCC & LMD Holding CompanyUSUnited States · 25 September 2026 Social Security numbersGovernment ID numbersHealth and medical information+1 242Vermont residents
  17. Ocean Edge Resort and Golf ClubUSUnited States · 25 August 2026 Social Security numbersGovernment ID numbersHealth and medical information 8Vermont residents
  18. Lehigh Valley Restaurant BrandsUSUnited States · 6 August 2026 17.9Kpeople
  19. CTS Journey Holdings LLC dba Corporate Travel ServiceUSUnited States · 3 August 2026 37.7Kpeople
  20. Frontier AirlinesUSUnited States · CO · 9 July 2026 Social Security numbersDriver’s license numbersGovernment ID numbers+3 11.5Kpeople
Show 31 more
  1. Little Bonanza Inc dba Bonanza CasinoUSUnited States · 8 July 2026 3.6Kpeople
  2. Casino LLC dba Larry Flynt's Lucky Lady CasinoUSUnited States · CA · 10 June 2026 Social Security numbersDriver’s license numbersGovernment ID numbers+3 25.9Kpeople
  3. Taos Mountain CasinoUSUnited States · 9 June 2026 4.1Kpeople
  4. BCD TravelCountry being checked · 5 June 2026 Email addressesPhone numbersNames+4 396.3Kaccounts
  5. Station CasinosUSUnited States · 21 May 2026 Social Security numbers 43.8Kpeople
  6. Vacation Myrtle BeachUSUnited States · 15 May 2026 Social Security numbersHealth and medical informationFinancial account and card details 22Indiana residents
  7. JC ResortsUSUnited States · 28 April 2026 5.9Kpeople
  8. Restaurant Management Co. of WichitaUSUnited States · KS · 17 April 2026 Social Security numbersDriver’s license numbersGovernment ID numbers+6 120.4Kpeople
  9. Nobu Restaurant Group Holding CompanyUSUnited States · NY · 17 April 2026 Social Security numbersDriver’s license numbersGovernment ID numbers+4 3.2Kpeople
  10. Travelopia Group HoldingsUSUnited States · 8 April 2026 349people
  11. Wynn ResortsUSUnited States · NV · 3 April 2026 Social Security numbersDates of birthNames+1 21.8Kpeople
  12. Choice Hotels InternationalUSUnited States · MD · 19 February 2026 Social Security numbersNames 24.1Kpeople
  13. Ace Mart Restaurant SupplyUSUnited States · TX · 17 February 2026 Social Security numbersDriver’s license numbersFinancial account and card details+1 1.5KTexas residents
  14. Brett Robinson Vacation RentalsUSUnited States · 7 January 2026 3.9Kpeople
  15. Hudson River Partners I L. P. d/b/a The Thayer HotelUSUnited States · NY · 3 November 2025 Driver’s license numbers 1.8KTexas residents
  16. Vietnam AirlinesCountry being checked · 11 October 2025 Email addressesPhone numbersDates of birth+2 7.3Maccounts
  17. Resort Data ProcessingUSUnited States · 14 May 2025 5KOregon residents
  18. Global Crossing Airlines GroupUSUnited States · FL · 9 May 2025 –not reported
  19. American Express Travel Related ServicesUSUnited States · 23 April 2025 –not reported
  20. Rivers Casino PhiladelphiaUSUnited States · 28 February 2025 1.9MOregon residents
  21. SP Cruises Opco Limited (“Azamara Cruises”)USUnited States · 25 February 2025 –not reported
  22. Highgate Hotels, L.P.USUnited States · 6 December 2024 –not reported
  23. Preferred Travel GroupUSUnited States · 6 November 2024 –not reported
  24. Riverside Resort & CasinoUSUnited States · 5 September 2024 55.2KOregon residents
  25. Brownell TravelUSUnited States · 31 July 2024 –not reported
  26. Panda Restaurant Group, Inc. (PRG)USUnited States · 30 April 2024 239.8KOregon residents
  27. Indigo Sky Casino and Resort and Outpost CasinoUSUnited States · 10 January 2024 12Washington residents
  28. MGM Resorts InternationalUSUnited States · 5 December 2023 –not reported
  29. Midwest Gaming and Entertainment, LLC d/b/a Rivers Casino Des PlainesUSUnited States · 20 November 2023 294Delaware residents
  30. Crystal Bay CasinoUSUnited States · 24 February 2023 86.3KOregon residents
  31. Rancho Mesquite CasinoUSUnited States · 17 February 2023 229.3KOregon residents

How the sector is decided

A sector is read from the organisation’s own name (“Mercy Hospital”, “First National Bank”, “Lincoln School District”) and from the register it filed with (every notice on the US health department’s breach portal is a health organisation’s). A name that says nothing has no sector, and a name can mislead now and then, so these figures are a floor. Found one in the wrong place? Tell us.

Follow breaches in travel and hospitality (Atom feed) · Other sectors: Healthcare, Education, Government, Insurance, Banks and finance, Law and accounting, Retail and e-commerce, Industry, energy and transport, Technology and telecom, Non-profits and associations

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.