Hyatt Hotels Corporation

Companies / web services

Aliases / services: ハイアット・ホテルズ / Hyatt / ハイアット / Hyatt Hotels Corporation
Official website: https://www.hyatt.com/

Sources identifying the operating company

https://www.oag.ca.gov/system/files/Hyatt%20-%20Regulatory%20Packet_0.pdf

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

onsite card payments at Hyatt-managed locations

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Investigators found signs of card-data access at some managed locations mainly during August 13–December 8, 2015; some windows began July 30. Scope is location/date-specific.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the affected location/date information and promptly report unfamiliar card charges to the issuer.

Official service URL

https://www.hyatt.com/

Source URLs

Operator and official informationhttps://www.oag.ca.gov/system/files/Hyatt%20-%20Regulatory%20Packet_0.pdfService and operation documentation

Related official sources

Operator and official informationOfficial information directoryIdentifies Hyatt Hotels Corporation and the relevant service scope.
2016-01-14 official security noticeOfficial notice; link to this PHP incident unconfirmedInvestigators found signs of card-data access at some managed locations mainly during August 13–December 8, 2015; some windows began July 30.