Hyatt
Data Breach on January 15, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | hyatt.com | ||
| Claimed By | NightSpire | ||
| Date Discovered | Jan 15, 2026 | ||
| Description | Hyatt is a global hospitality company based in the USA (Illinois) that operates, franchises and licenses a broad portfolio of branded hotels, resorts, residence properties and vacation-ownership experiences worldwide. | ||
| Leak Size | 48.5GB |
Credential Exposure for hyatt.com
We've indexed 15,934 @hyatt.com accounts from external breaches, plus 18,431 credentials for hyatt.com itself.
Last checked Oct 11, 2026
| @hyatt.com addresses from external breaches | |
|---|---|
| Third-party breaches | 15,065 accounts · across 984 breaches · 13,847 with a plaintext password · most recent Apr 19, 2026 |
| Combo lists | 4,456 accounts · most recent Oct 10, 2026 |
| Phishing pages | 26 accounts · most recent Aug 13, 2026 |
| Passwords for hyatt.com accounts | |
|---|---|
| Combo lists | 14,434 logins · most recent Oct 10, 2026 |
| Infostealer logs | 5,948 logins · 4,117 infected devices · most recent Oct 10, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Hyatt was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.