Pyramid Global Hospitality Data Breach Exposes Sensitive Personal Information
Pyramid Global Hospitality, a major third-party hospitality management firm, confirmed a data breach on August 14, 2025, after the hacking group Worldleaks claimed responsibility and posted stolen data on the dark web on September 23, 2025. The company, formed in 2021 through the merger of three hospitality firms, operates out of Boston, Massachusetts, and The Woodlands, Texas, with additional offices in Cincinnati, Miami, and London, employing approximately 18,000 people.
Affected individuals were notified in writing on October 29, 2025, and again on February 25, 2026, the same day the breach was reported to the Maine Attorney General. At least 1,299 Maine residents were confirmed impacted, though the total number of affected individuals nationwide remains undisclosed.
The breach exposed a range of sensitive data, including:
- Names
- Social Security numbers
- Driver’s license or state ID numbers
- Government identification numbers
- Financial account information
- Health insurance and medical details
The law firm Shamis & Gentile P.A. is investigating the incident, noting that affected individuals may be eligible for compensation. The full scope of the breach and its broader impact are still under review.
Source: https://www.claimdepot.com/investigations/pyramid-global-hospitality-data-breach-2026
Pyramid Global Hospitality cybersecurity rating report: https://www.rankiteo.com/company/pyramid-global-hospitality
"id": "PYR1772121574",
"linkid": "pyramid-global-hospitality",
"type": "Breach",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'At least 1,299 Maine residents '
'(total undisclosed)',
'industry': 'Hospitality',
'location': ['Boston, Massachusetts',
'The Woodlands, Texas',
'Cincinnati',
'Miami',
'London'],
'name': 'Pyramid Global Hospitality',
'size': '18,000 employees',
'type': 'Third-party hospitality management firm'}],
'customer_advisories': 'Written notifications sent to affected individuals on '
'October 29, 2025, and February 25, 2026',
'data_breach': {'data_exfiltration': 'Yes (posted on dark web by Worldleaks)',
'number_of_records_exposed': 'At least 1,299 (Maine residents '
'only, total undisclosed)',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Driver’s license or state ID '
'numbers',
'Government identification '
'numbers',
'Financial account information',
'Health insurance and medical '
'details']},
'date_detected': '2025-08-14',
'date_publicly_disclosed': '2025-09-23',
'description': 'Pyramid Global Hospitality, a major third-party hospitality '
'management firm, confirmed a data breach after the hacking '
'group Worldleaks claimed responsibility and posted stolen '
'data on the dark web. The breach exposed sensitive personal '
'information, including names, Social Security numbers, '
'driver’s license or state ID numbers, government '
'identification numbers, financial account information, health '
'insurance, and medical details.',
'impact': {'data_compromised': 'Sensitive personal information, including '
'names, Social Security numbers, driver’s '
'license or state ID numbers, government '
'identification numbers, financial account '
'information, health insurance, and medical '
'details',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Under review',
'ransomware': {'data_exfiltration': 'Yes'},
'references': [{'source': 'Maine Attorney General'},
{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Reported to Maine Attorney '
'General on February 25, 2026',
'regulatory_notifications': 'Maine Attorney '
'General'},
'response': {'communication_strategy': 'Written notifications sent to '
'affected individuals on October 29, '
'2025, and February 25, 2026',
'third_party_assistance': 'Shamis & Gentile P.A. (law firm '
'investigating)'},
'threat_actor': 'Worldleaks',
'title': 'Pyramid Global Hospitality Data Breach Exposes Sensitive Personal '
'Information',
'type': 'Data Breach'}