Sector
Data breaches in travel and hospitality
51 organisations in travel and hospitality with a confirmed or reported breach on the tracker, newest first.
- Last 30 days
- 14
- 2026 so far
- 34
- On record
- 51
- Median days to tell
- 137
From the day a breach began to the day it was first reported, a median of 137 days, over the 26 breaches in this sector whose notice gives a start date.
What was taken most often
- Names20
- ID numbers17
- Phone numbers10
- Email addresses9
- Card and bank details8
- Health information6
The number of breaches in which each kind of data was exposed.
The largest
- Vietnam Airlines Email addressesPhone numbersDates of birth+2 7.3Maccounts
- Club Tourismreported Email addressesPhone numbersDates of birth+6 4.3Mrecords
- Rakuten Travel Financial account and card detailsEmail addressesPhone numbers+5 2.6Mcustomers
-
BCD Travel
Email addressesPhone numbersNames+4
396.3Kaccounts
- Casinos Austriareported Email addressesNamesPurchase details+1 150Kcustomers
Every breach, newest first
- Thai Airwaysreported Passport numbersEmail addressesPhone numbers+5 –not reported
- Hotel Koldingfjordreported Financial account and card detailsNamesContact information 1customers
- Aalbæk Badehotelreported Personal information –not reported
- Hotel Tønderhus Email addressesPhone numbersNames 4Kguests
- Casinos Austriareported Email addressesNamesPurchase details+1 150Kcustomers
- Singapore Airlines Passport numbersNamesTravel routes 46Kpassengers
- L'office de tourisme de Strasbourgreported Email addressesPhone numbersNames –not reported
- Club Tourismreported Email addressesPhone numbersDates of birth+6 4.3Mrecords
- All Nippon Airwaysreported Passport numbersPhone numbersNames+5 37.8Kcustomers
- Hong Kong Airlinesreported Customer data 1.6Kcustomers
- Japan Airlinesreported Passport numbersNamesReservation numbers+3 92Kpeople
- Cathay Pacific Airways Email addressesPhone numbersBooking references+7 53Krecords
- Rakuten Travel Financial account and card detailsEmail addressesPhone numbers+5 2.6Mcustomers
- Martini Hotel Groupreported Phone numbers 15guests
- Waterford Hotel Group LLC & LMD Holding 22Kpeople
- Waterford Hotel Group, LCC & LMD Holding Company Social Security numbersGovernment ID numbersHealth and medical information+1 242Vermont residents
- Ocean Edge Resort and Golf Club Social Security numbersGovernment ID numbersHealth and medical information 8Vermont residents
- Lehigh Valley Restaurant Brands 17.9Kpeople
- CTS Journey Holdings LLC dba Corporate Travel Service 37.7Kpeople
- Frontier Airlines Social Security numbersDriver’s license numbersGovernment ID numbers+3 11.5Kpeople
Show 31 more
- Little Bonanza Inc dba Bonanza Casino 3.6Kpeople
- Casino LLC dba Larry Flynt's Lucky Lady Casino Social Security numbersDriver’s license numbersGovernment ID numbers+3 25.9Kpeople
- Taos Mountain Casino 4.1Kpeople
-
BCD Travel
Email addressesPhone numbersNames+4
396.3Kaccounts
- Station Casinos Social Security numbers 43.8Kpeople
- Vacation Myrtle Beach Social Security numbersHealth and medical informationFinancial account and card details 22Indiana residents
- JC Resorts 5.9Kpeople
- Restaurant Management Co. of Wichita Social Security numbersDriver’s license numbersGovernment ID numbers+6 120.4Kpeople
- Nobu Restaurant Group Holding Company Social Security numbersDriver’s license numbersGovernment ID numbers+4 3.2Kpeople
- Travelopia Group Holdings 349people
- Wynn Resorts Social Security numbersDates of birthNames+1 21.8Kpeople
- Choice Hotels International Social Security numbersNames 24.1Kpeople
- Ace Mart Restaurant Supply Social Security numbersDriver’s license numbersFinancial account and card details+1 1.5KTexas residents
- Brett Robinson Vacation Rentals 3.9Kpeople
- Hudson River Partners I L. P. d/b/a The Thayer Hotel Driver’s license numbers 1.8KTexas residents
- Vietnam Airlines Email addressesPhone numbersDates of birth+2 7.3Maccounts
- Resort Data Processing 5KOregon residents
- Global Crossing Airlines Group –not reported
- American Express Travel Related Services –not reported
- Rivers Casino Philadelphia 1.9MOregon residents
- SP Cruises Opco Limited (“Azamara Cruises”) –not reported
- Highgate Hotels, L.P. –not reported
- Preferred Travel Group –not reported
- Riverside Resort & Casino 55.2KOregon residents
- Brownell Travel –not reported
- Panda Restaurant Group, Inc. (PRG) 239.8KOregon residents
- Indigo Sky Casino and Resort and Outpost Casino 12Washington residents
- MGM Resorts International –not reported
- Midwest Gaming and Entertainment, LLC d/b/a Rivers Casino Des Plaines 294Delaware residents
- Crystal Bay Casino 86.3KOregon residents
- Rancho Mesquite Casino 229.3KOregon residents
How the sector is decided
A sector is read from the organisation’s own name (“Mercy Hospital”, “First National Bank”, “Lincoln School District”) and from the register it filed with (every notice on the US health department’s breach portal is a health organisation’s). A name that says nothing has no sector, and a name can mislead now and then, so these figures are a floor. Found one in the wrong place? Tell us.
Follow breaches in travel and hospitality (Atom feed) · Other sectors: Healthcare, Education, Government, Insurance, Banks and finance, Law and accounting, Retail and e-commerce, Industry, energy and transport, Technology and telecom, Non-profits and associations
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.