Otelier data breach exposes info, hotel reservations of millions

Otelier, a cloud-based hotel management platform used by thousands of hotels including Marriott, Hilton, and Hyatt, suffered a large-scale data breach after attackers leveraged employee credentials stolen by infostealer malware to access AWS S3 buckets and exfiltrate an estimated 7.8 TB of data containing millions of reservation records and personally identifiable information; the actors attempted extortion, samples were shared with researchers and Have I Been Pwned, and Otelier has engaged cybersecurity firms, disabled affected accounts, and is investigating.