Omni Hotels says customers’ personal data stolen in ransomware attack

Omni Hotels & Resorts experienced a ransomware attack in late March 2024 attributed to the Daixin gang; the company shut down systems, experienced widespread service outages, and restored operations about a week later. The attacker claims to have exfiltrated customer personal data (names, emails, postal addresses, loyalty program information) — reportedly up to 3.5 million records — though Omni says financial information and Social Security numbers were not taken. The gang shared sample files with a reporter and posted extortion claims on its dark web site.