https://privacyunpacked.com/breaches/sector/hospitality/feed.xml 2026-11-10T00:00:00Z Privacy Unpacked https://privacyunpacked.com/breaches/company/thai-airways/#thaiairways-2026-11-10 2026-11-10T00:00:00Z

Báo Mới reported a data breach at Thai Airways (Thailand) on 10 November 2026. Exposed: Passport numbers, Email addresses, Phone numbers, Passenger names, Booking codes and Flight dates and more.

https://privacyunpacked.com/breaches/company/aalb-k-badehotel/#aalbkbadehotel-2026-11-08 2026-11-08T00:00:00Z

TV2 Nord reported a data breach at Aalbæk Badehotel (Denmark) on 8 November 2026. Exposed: Personal information.

https://privacyunpacked.com/breaches/company/hotel-koldingfjord/#hotelkoldingfjord-2026-11-08 2026-11-08T00:00:00Z

DR and kolding-netavis reported a data breach at Hotel Koldingfjord (Denmark) on 8 November 2026. It affected 1 customers. Exposed: Financial account and card details, Names and Contact information.

https://privacyunpacked.com/breaches/company/casinos-austria/#casinosaustria-2026-11-07 2026-11-07T00:00:00Z

La Estrella de Panamá and ABC Color reported a data breach at Casinos Austria (Austria) on 7 November 2026. It affected 150,000 customers. Exposed: Email addresses, Names, Purchase details and Discount voucher history.

https://privacyunpacked.com/breaches/company/hotel-t-nderhus/#hoteltnderhus-2026-11-07 2026-11-07T00:00:00Z

TV SYD reported a data breach at Hotel Tønderhus (Denmark) on 7 November 2026, and it has been confirmed. It affected 4,000 guests. Exposed: Email addresses, Phone numbers and Names.

https://privacyunpacked.com/breaches/company/singapore-airlines/#singaporeairlines-2026-11-04 2026-11-04T00:00:00Z

whalesbook, NewsBytes and wnp.pl reported a data breach at Singapore Airlines (Norway) on 4 November 2026, and it has been confirmed. It affected 46,000 passengers. Exposed: Passport numbers, Names and Travel routes.

https://privacyunpacked.com/breaches/company/l-office-de-tourisme-de-strasbourg/#lofficedetourismedestrasbourg-2026-11-02 2026-11-02T00:00:00Z

frenchbreaches reported a data breach at L'office de tourisme de Strasbourg (France) on 2 November 2026. Exposed: Email addresses, Phone numbers and Names.

https://privacyunpacked.com/breaches/company/club-tourism/#clubtourism-2026-10-31 2026-10-31T00:00:00Z

Asahi Shimbun Digital, Nikkei Business Daily and ITmedia reported a data breach at Club Tourism (Japan) on 31 October 2026. It affected 4,320,000 records. Exposed: Email addresses, Phone numbers, Dates of birth, Names, Addresses and Nationality and more.

https://privacyunpacked.com/breaches/company/all-nippon-airways/#allnipponairways-2026-10-30 2026-10-30T00:00:00Z

The Mainichi and FNN Prime Online reported a data breach at All Nippon Airways (Japan) on 30 October 2026. It affected 37,800 customers. Exposed: Passport numbers, Phone numbers, Names, Reservation numbers, Travel dates and Flight segments and more.

https://privacyunpacked.com/breaches/company/cathay-pacific-airways/#cathaypacificairways-2026-10-30 2026-10-28T00:00:00Z

The Straits Times, MarketScreener and detikcom reported a data breach at Cathay Pacific Airways (Hong Kong SAR China) on 28 October 2026, and it has been confirmed. It affected 53,000 records. Exposed: Email addresses, Phone numbers, Booking references, Passenger names, Flight details and Travel document information and more.

https://privacyunpacked.com/breaches/company/hong-kong-airlines/#hongkongairlines-2026-10-28 2026-10-28T00:00:00Z

Đài Truyền Hình Việt Nam reported a data breach at Hong Kong Airlines (Hong Kong SAR China) on 28 October 2026. It affected 1,600 customers. Exposed: Customer data.

https://privacyunpacked.com/breaches/company/japan-airlines/#japanairlines-2026-10-28 2026-10-28T00:00:00Z

FNN Prime Online reported a data breach at Japan Airlines (Japan) on 28 October 2026. It affected 92,000 people. Exposed: Passport numbers, Names, Reservation numbers, Flight segments, Nationality and Contact information.

https://privacyunpacked.com/breaches/company/rakuten-travel/#rakutentravel-2026-10-26 2026-10-26T00:00:00Z

internationalpress and Security NEXT reported a data breach at Rakuten Travel (Japan) on 26 October 2026, and it has been confirmed. It affected 2,600,000 customers. Exposed: Financial account and card details, Email addresses, Phone numbers, Names, Residential country and Internal ID numbers and more.

https://privacyunpacked.com/breaches/company/martini-hotel-group/#martinihotel-2026-10-16 2026-10-16T00:00:00Z

RTV Noord reported a data breach at Martini Hotel Group (Netherlands) on 16 October 2026. It affected 15 guests. Exposed: Phone numbers.

https://privacyunpacked.com/breaches/company/waterford-hotel-group-lcc-and-lmd-holding/#waterfordhotellcclmdholding-2026-09-25 2026-09-25T00:00:00Z

Waterford Hotel Group, LCC & LMD Holding Company (United States) notified the Vermont Attorney General of a data breach on 25 September 2026. It told that state about 242 Vermont residents; the total can be higher. Exposed: Social Security numbers, Government ID numbers, Health and medical information and Financial account and card details.

https://privacyunpacked.com/breaches/company/waterford-hotel-group-llc-and-lmd-holding/#waterfordhotellmdholding-2026-09-25 2026-09-25T00:00:00Z

Waterford Hotel Group LLC & LMD Holding (United States) notified the Indiana Attorney General of a data breach on 25 September 2026. It affected 21,973 people. The breach began on 2 April 2026, 176 days before it was reported.

https://privacyunpacked.com/breaches/company/ocean-edge-resort-and-golf-club/#oceanedgeresortandgolfclub-2026-08-25 2026-08-25T00:00:00Z

Ocean Edge Resort and Golf Club (United States) notified the Indiana Attorney General and the Vermont Attorney General of a data breach on 25 August 2026. It told the states about 8 Vermont residents; the total can be higher. Exposed: Social Security numbers, Government ID numbers and Health and medical information. The breach began on 22 July 2025, 399 days before it was reported.

https://privacyunpacked.com/breaches/company/lehigh-valley-restaurant-brands/#lehighvalleyrestaurantbrands-2026-08-06 2026-08-06T00:00:00Z

Lehigh Valley Restaurant Brands (United States) notified the Indiana Attorney General of a data breach on 6 August 2026. It affected 17,892 people. The breach began on 13 December 2025, 236 days before it was reported.

https://privacyunpacked.com/breaches/company/corporate-travel-service/#ctsjourneydbacorporatetravelservice-2026-08-03 2026-08-03T00:00:00Z

CTS Journey Holdings LLC dba Corporate Travel Service (United States) notified the Indiana Attorney General of a data breach on 3 August 2026. It affected 37,682 people. The breach began on 3 December 2025, 243 days before it was reported.

https://privacyunpacked.com/breaches/company/frontier-airlines/#frontierairlines-2026-07-09 2026-07-09T00:00:00Z

Frontier Airlines (CO, United States) notified the Vermont Attorney General, the Texas Attorney General and the Indiana Attorney General of a data breach on 9 July 2026. It affected 11,482 people. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Dates of birth, Names and Addresses.

https://privacyunpacked.com/breaches/company/bonanza-casino/#littlebonanzadbabonanzacasino-2026-07-08 2026-07-08T00:00:00Z

Little Bonanza Inc dba Bonanza Casino (United States) notified the Indiana Attorney General of a data breach on 8 July 2026. It affected 3,609 people. The breach began on 21 February 2026, 137 days before it was reported.

https://privacyunpacked.com/breaches/company/larry-flynt-s-lucky-lady-casino/#casinodbalarryflyntsluckyladycasino-2026-06-10 2026-06-10T00:00:00Z

Casino LLC dba Larry Flynt's Lucky Lady Casino (CA, United States) notified the Vermont Attorney General, the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 10 June 2026. It affected 25,851 people. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health and medical information, Financial account and card details and Names.

https://privacyunpacked.com/breaches/company/taos-mountain-casino/#taosmountaincasino-2026-06-09 2026-06-09T00:00:00Z

Taos Mountain Casino (United States) notified the Indiana Attorney General of a data breach on 9 June 2026. It affected 4,099 people. The breach began on 28 March 2026, 73 days before it was reported.

https://privacyunpacked.com/breaches/company/bcd-travel/#bcdtravel-2026-06-05 2026-06-05T00:00:00Z

A breach of BCD Travel was added to Have I Been Pwned’s breach database on 5 June 2026. It affected 396,313 accounts. Exposed: Email addresses, Phone numbers, Names, Addresses, Employers and Job titles and more. The breach began on 29 May 2026, 7 days before it was reported.

https://privacyunpacked.com/breaches/company/station-casinos/#stationcasinos-2026-05-21 2026-05-21T00:00:00Z

Station Casinos (United States) notified the Vermont Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 21 May 2026. It affected 43,838 people. Exposed: Social Security numbers. The breach began on 5 March 2026, 77 days before it was reported.

https://privacyunpacked.com/breaches/company/vacation-myrtle-beach/#vacationmyrtlebeach-2026-05-15 2026-05-15T00:00:00Z

Vacation Myrtle Beach (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 15 May 2026. It told the states about 22 Indiana residents; the total can be higher. Exposed: Social Security numbers, Health and medical information and Financial account and card details.

https://privacyunpacked.com/breaches/company/jc-resorts/#jcresorts-2026-04-28 2026-04-28T00:00:00Z

JC Resorts (United States) notified the Indiana Attorney General and the California Attorney General of a data breach on 28 April 2026. It affected 5,942 people. The breach began on 19 January 2026, 99 days before it was reported.

https://privacyunpacked.com/breaches/company/nobu-restaurant-group-holding/#noburestaurantholding-2026-04-17 2026-04-17T00:00:00Z

Nobu Restaurant Group Holding Company (NY, United States) notified the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 17 April 2026. It affected 3,171 people. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information and Financial account and card details and more. The breach began on 6 October 2025, 193 days before it was reported.

https://privacyunpacked.com/breaches/company/restaurant-management-co-of-wichita/#restaurantmanagementofwichita-2026-04-17 2026-04-17T00:00:00Z

Restaurant Management Co. of Wichita (KS, United States) notified the Vermont Attorney General, the Texas Attorney General and the Indiana Attorney General of a data breach on 17 April 2026. It affected 120,416 people. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information and Financial account and card details and more.

https://privacyunpacked.com/breaches/company/travelopia-group-holdings/#travelopia-2026-04-08 2026-04-08T00:00:00Z

Travelopia Group Holdings (United States) notified the Indiana Attorney General of a data breach on 8 April 2026. It affected 349 people. The breach began on 2 October 2025, 188 days before it was reported.

https://privacyunpacked.com/breaches/company/wynn-resorts/#wynnresorts-2026-04-06 2026-04-03T00:00:00Z

Wynn Resorts (NV, United States) notified the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 3 April 2026. It affected 21,775 people. Exposed: Social Security numbers, Dates of birth, Names and Addresses. The breach began on 5 October 2025, 180 days before it was reported.

https://privacyunpacked.com/breaches/company/choice-hotels-international/#choicehotelsinternational-2026-02-19 2026-02-19T00:00:00Z

Choice Hotels International (MD, United States) notified the Oregon Department of Justice, the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 19 February 2026. It affected 24,115 people. Exposed: Social Security numbers and Names. The breach began on 14 January 2026, 36 days before it was reported.

https://privacyunpacked.com/breaches/company/ace-mart-restaurant-supply/#acemartrestaurantsupply-2026-02-17 2026-02-17T00:00:00Z

Ace Mart Restaurant Supply (TX, United States) notified the Texas Attorney General of a data breach on 17 February 2026. It told that state about 1,484 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Financial account and card details and Names.

https://privacyunpacked.com/breaches/company/brett-robinson-vacation-rentals/#brettrobinsonvacationrentals-2026-01-07 2026-01-07T00:00:00Z

Brett Robinson Vacation Rentals (United States) notified the Indiana Attorney General of a data breach on 7 January 2026. It affected 3,935 people. The breach began on 26 March 2025, 287 days before it was reported.

https://privacyunpacked.com/breaches/company/thayer-hotel/#hudsonriverpartnersilp-2025-11-04 2025-11-03T00:00:00Z

Hudson River Partners I L. P. d/b/a The Thayer Hotel (NY, United States) notified the Texas Attorney General and the California Attorney General of a data breach on 3 November 2025. It told the states about 1,826 Texas residents; the total can be higher. Exposed: Driver’s license numbers. The breach began on 19 September 2025, 45 days before it was reported.

https://privacyunpacked.com/breaches/company/vietnam-airlines/#vietnamairlines-2025-10-11 2025-10-11T00:00:00Z

A breach of Vietnam Airlines was added to Have I Been Pwned’s breach database on 11 October 2025. It affected 7,316,915 accounts. Exposed: Email addresses, Phone numbers, Dates of birth, Names and Loyalty program details. The breach began on 20 June 2025, 113 days before it was reported.

https://privacyunpacked.com/breaches/company/resort-data-processing/#resortdataprocessing-2025-05-14 2025-05-14T00:00:00Z

Resort Data Processing (United States) notified the Oregon Department of Justice of a data breach on 14 May 2025. It told that state about 5,007 Oregon residents; the total can be higher. The breach began on 19 February 2025, 84 days before it was reported.

https://privacyunpacked.com/breaches/company/global-crossing-airlines-group/#globalcrossingairlines-2025-05-09 2025-05-09T00:00:00Z

Global Crossing Airlines Group (FL, United States) notified the US Securities and Exchange Commission (8-K Item 8.01) of a data breach on 9 May 2025.

https://privacyunpacked.com/breaches/company/american-express-travel-related-services/#americanexpresstravelrelatedservices-2025-04-23 2025-04-23T00:00:00Z

American Express Travel Related Services (United States) notified the California Attorney General of a data breach on 23 April 2025. The breach began on 19 February 2025, 63 days before it was reported.

https://privacyunpacked.com/breaches/company/rivers-casino-philadelphia/#riverscasinophiladelphia-2025-02-28 2025-02-28T00:00:00Z

Rivers Casino Philadelphia (United States) notified the Oregon Department of Justice, the California Attorney General and the Washington Attorney General of a data breach on 28 February 2025. It told the states about 1,942,182 Oregon residents; the total can be higher. The breach began on 14 October 2024, 137 days before it was reported.