FlagThis

Hotel management platform Otelier has suffered a significant data breach, compromising the personal information and hotel reservations of millions of guests. The breach occurred after threat actors gained access to Otelier's Amazon S3 cloud storage. This allowed them to steal a large amount of sensitive data, reportedly close to eight terabytes. The affected hotel brands include major names like Marriott, Hilton, and Hyatt, raising concerns about widespread impact.

The stolen data includes personally identifiable information and reservation details, which could potentially expose guests to identity theft and various types of fraud. Otelier has confirmed the data breach and stated that they are communicating with their impacted customers. The initial breach is said to have started in July 2024 and continued through October of the same year. This extended access allowed the attackers to exfiltrate the substantial amount of data that they are now believed to have.

ImgSrc: www.bleepstatic.com

References:

• @bleepingcomputer.com - BleepingComputer - BleepingComputer post on Otelier data breach on BlueSky. - 12d
• @BleepingComputer - Infosec Exchange post on Otelier data breach. - 12d
• www.bleepingcomputer.com - BleepingComputer exclusive on the Otelier data breach. - 12d
• cyberinsider.com - Otelier Breach Exposes Marriot, Hilton Bookings and Client Info - 12d
• BleepingComputer - Otelier data breach exposes info, hotel reservations of millions - 12d
• CyberInsider - Otelier Breach Exposes Marriot, Hilton Bookings and Client Info - 11d

Classification:

• HashTags: HotelDataBreach DataLeak CloudSecurity
• Company: Otelier
• Target: Hotel guests
• Product: Hotel Booking
• Feature: S3 breach
• Type: DataBreach
• Severity: Major