118,538 Trump Hotels Guest Records Surfaced on Dark Web

HEROIC analysts documented the Trump Hotels breach on February 3, 2025, after a guest database extract from the luxury hospitality brand (trumphotels.com) began circulating on underground forums. The leak exposed 118,538 guest records containing email addresses, first names, and last names.

Why This Hospitality Breach Is Dangerous

A high-end hotel brand implies a high net-worth guest base. Attackers value that context because the same guests hold premium credit cards, loyalty balances, and executive email accounts. Names paired with personal email produce very believable travel-themed phishing lures.

What Was Exposed in the Trump Hotels Leak

• Email addresses submitted at booking
• First names as entered in the reservation
• Last names as entered in the reservation

Why This Matters

With name plus email from a luxury brand, attackers craft phishing that mimics reservation updates, loyalty rewards, and refund offers. Guests who reuse credentials face account takeover on travel sites, and identity theft becomes easier when the leak is joined to other breaches. Fraud rings love hospitality data because the victim profile trends high value.

How Database Breaches Work

Hospitality platforms frequently integrate with multiple third parties, from loyalty engines to reservation systems, creating a broad attack surface. A compromised vendor account, a misconfigured API, or SQL injection in a legacy booking form can expose the guest table. The data then moves through dark web marketplaces aimed at fraud rings.

Check If You Are Affected

If you have booked with Trump Hotels or any luxury hospitality brand, run HEROIC's free scan against more than 400 billion exposed records to see whether your email turned up in this leak or related hotel dumps.