Data breach

Kempinski data leak followed by fraudulent payment requests

First reported 2026-11-14 · Last reported 2026-11-14 · 3 related reports

The misuse of a technology partner's access credentials exposed Kempinski hotel customers' contact details and reservation information. Fraudulent payment requests citing actual reservation details followed. Kempinski confirmed the customer data leak and could not rule out the possible exposure of passport and visa numbers.

Key facts

Affected organization: Kempinski
Incident type: Data breach
Occurred / detected: Not confirmed
Scale of damage: Hotel customers' contact details and reservation information exposed
Cause / method: Misuse of a technology partner's access credentials
Location: Germany

If your data was exposed

Exposed dataUsage & purchase history

Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

2026-11-14The Kempinski customer data leak and fraudulent payment requests using actual reservation details became public.
2026-11-14Kempinski confirmed the customer data leak and the subsequent fraudulent payment requests.

3 related reports

Cyberattack | Kempinski hit by guest data theft, Hotel Adlon affectedThe Hospitality Tribune · 2026-11-14
Kempinski Data Breach Triggers Fake Payment RequestsFTN news · 2026-11-14
The Kempinski group, based in Munich, confirms a guest data breach followed by fake payment requestsLa Revue des Hôtels · 2026-11-14

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.