Amadeus iHotelier
ModerateConfirmedDigital services
Amadeus iHotelier, a booking engine used by numerous hotels for direct online reservations, suffered a security incident revealed in September 2026 through notifications sent by several client hotels to their own customers. 7Hotel & Spa (Illkirch-Graffenstaden) states that Amadeus confirmed unauthorized access to its customers' reservation data, while the German hotel group Maritim reported that reservation lists were stolen for stays scheduled between August 2026 and September 2027.
Combining identity, contact details and precise booking information makes fraudulent messages impersonating a hotel or the booking platform more convincing.
- Disclosed on
- September 20, 2026
- Sector
- Digital services
- Country
- Spain
- Cause
- Third-party provider
Exposed data
- Full name
- Postal address
- Email address
- Phone number
- Customer ID
- Order history
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact