Shangri-La Group

Shangri-La Group suffered a data breach incident which leaked the personal information of more than 290,000 people who stayed at three hotels in Hong Kong.

Some of the files were leaked from the databases, though the contents of the leaked data files may involve guest data.

The data included the customers’ names, contact details, account numbers for the membership scheme, booking dates and affiliated companies.

However, the hotel chain offered its customers in Hong Kong a free year of personal data protection.

Source: https://www.scmp.com/news/hong-kong/law-and-crime/article/3194526/more-290000-people-risk-data-leaks-after-3-hong-kong

TPRM report: https://scoringcyber.rankiteo.com/company/shangri-la-hotels-and-resorts

"id": "sha2110161122",
"linkid": "shangri-la-hotels-and-resorts",
"type": "Breach",
"date": "10/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': '290,000',
                        'industry': 'Hospitality',
                        'location': 'Hong Kong',
                        'name': 'Shangri-La Group',
                        'type': 'Hotel Chain'}],
 'data_breach': {'number_of_records_exposed': '290,000',
                 'personally_identifiable_information': ['customers’ names',
                                                         'contact details'],
                 'type_of_data_compromised': ['customers’ names',
                                              'contact details',
                                              'account numbers for the '
                                              'membership scheme',
                                              'booking dates',
                                              'affiliated companies']},
 'description': 'A data breach incident at Shangri-La Group leaked the '
                'personal information of more than 290,000 people who stayed '
                'at three hotels in Hong Kong. The leaked data included '
                'customers’ names, contact details, account numbers for the '
                'membership scheme, booking dates, and affiliated companies. '
                'The hotel chain offered its customers in Hong Kong a free '
                'year of personal data protection.',
 'impact': {'data_compromised': ['customers’ names',
                                 'contact details',
                                 'account numbers for the membership scheme',
                                 'booking dates',
                                 'affiliated companies']},
 'title': 'Shangri-La Group Data Breach',
 'type': 'Data Breach'}