What was exposed, when it happened, and which databases confirm it.
- accounts
- 436,855
- Breached
- July 1, 2024
- Last Update
- January 18, 2025
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In July 2024, a threat actor gained access to the hotel management platform Otelier and retrieved customer data from well-known hotel brands including Marriott, Hilton, and Hyatt. The data included 437k customer email addresses (a further 868k generated email addresses from the booking.com and Expedia platforms were not loaded into HIBP), names, physical addresses, phone numbers, booking information related to travel plans, purchases recorded by the platform and in a small number of cases, partial credit card data.
Compromised Info
- Email addresses
- Names
- Partial credit card data
- Phone numbers
- Physical addresses
- Purchases
- Travel plans
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the Otelier breach?
The Otelier breach exposed: Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases, and Travel plans.
When did the Otelier breach happen?
The Otelier breach was disclosed on July 1, 2024 and affected 436,855 records.
Am I affected by the Otelier breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Otelier leak.