BreachCensus

Hyatt Hotels Corporation

HospitalityUnited States of America

Hyatt Hotels Corporation is a hospitality organisation in Washington. It appears on the California Attorney General breach-notification register and the Washington State Attorney General breach-notification register with 3 confirmed incidents; the most recent notice was filed on October 12, 2017.

Data as of September 6, 2026.

Confirmed incident

Filed in WA and CA — Data Interception

The same incident was filed separately with 2 jurisdictions within a few days of each other (WA and CA) — shown here as one incident.

Occurred
March 18, 2017
Disclosed
October 12, 2017

Timeline

  1. October 12, 2017
    Reported to regulator Regulator

    WA AG breach notification: 640 Washington residents affected

    source
  2. October 12, 2017
    Reported to regulator Regulator

    CA AG breach notification: an unknown number of California residents affected

    source
What a Washington notice means

Required under RCW 19.255.010. Notice to the Attorney General is required when a breach affects more than 500 Washington residents.

Note: the count is Washington residents only, not a total.

Washington breach-notification register ↗

What a California notice means

Required under Cal. Civ. Code §1798.82. A copy of the notification must be sent to the Attorney General when a single breach requires notifying more than 500 California residents.

Note: no affected-count is published on this register.

California breach-notification register ↗

Confirmed incident

Filed in WA and CA — Malware Deployment

The same incident was filed separately with 2 jurisdictions within a few days of each other (WA and CA) — shown here as one incident.

Occurred
August 13, 2015
Disclosed
January 14, 2016

Timeline

  1. January 14, 2016
    Reported to regulator Regulator

    WA AG breach notification: 15 Washington residents affected

    source
  2. January 14, 2016
    Reported to regulator Regulator

    CA AG breach notification: an unknown number of California residents affected

    source
Unverified claim

US — Ransomware Attack

This is an unverified claim — it has allegedly happened to this organisation, as posted by a source below, but has not been confirmed by a regulator, a court filing or the organisation’s own disclosure.

Timeline

  1. December 14, 2025
    Claimed by threat actor (unverified) Claim

    Ransomware leak-site claim (ransomware_live)

    source