Skip to content
Kempinski Hotel Group Confirms Guest Data Breach

Kempinski Hotel Group Confirms Guest Data Breach

First seen 14 Nov 2026, 15:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 14, 2026 at 15:43 UTC
  • •Unauthorized access to guest reservation data confirmed by Kempinski.
  • •No payment card information was compromised; passport or visa data may be affected.
  • •Kempinski has initiated an investigation and notified data protection authorities.

The Kempinski hotel group has confirmed a data breach involving unauthorized access to guest reservation details. A login credential from a third-party technology partner was misused, allowing an unauthorized party to access names, stay dates, hotel names, itinerary numbers, mobile numbers, and email addresses. The group stated that no payment card data was involved, as it is not stored in the compromised system. However, they cannot confirm whether passport or visa numbers were affected. Following the breach, Kempinski revoked the compromised credential and initiated an investigation with an independent cybersecurity specialist. They have also notified relevant data protection authorities and apologized to impacted guests. The incident was disclosed in a notice on their website dated November 12, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 8h ago How this analysis works

Timeline

2026-11-12
Kempinski issues security notice
Kempinski published a notice confirming unauthorized access to guest reservation data and the misuse of a third-party credential.
Larevuedeshotels
2026-11-14
Breach confirmed publicly
Kempinski confirmed the data breach in a public advisory, detailing the nature of the compromised data.
www.kempinski.com

More articles in this cluster (3)

Following this threat?

Track Kempinski AG in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

What guest information was compromised?
The compromised data includes guest names, stay dates, hotel names, itinerary numbers, mobile numbers, and email addresses.
Is payment card information affected?
No, Kempinski confirmed that no payment card data was involved as it is not stored in the affected system.
What should affected guests do?
Affected guests are advised to contact their hotel directly using the details provided on Kempinski's official website.