News · Aman

Aman Resorts Data Breach Reported by ShinyHunters

Aman Resorts, the Swiss-based luxury hospitality group, has reportedly been targeted by the ShinyHunters ransomware collective. Over half a million Salesforce records are said to be compromised, with a looming deadline for resolution.

· Japanese correspondent·September 17, 2026·2 min read
Abstract digital lines representing cybersecurity, overlaying a subtle hotel lobby background

Abstract digital lines representing cybersecurity, overlaying a subtle hotel lobby background

On April 19, 2026, news emerged of a significant cybersecurity incident affecting Aman Resorts, the esteemed luxury hospitality brand headquartered in Switzerland. The notorious ransomware collective, ShinyHunters, has claimed responsibility for a breach involving its Salesforce records.

According to DeXpose, the cybercriminals assert they have compromised over 500,000 Salesforce records containing personally identifiable information (PII). DeXpose reports that the group issued a ransom demand, setting a stringent deadline for the luxury hotel chain. 'This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that’ll come your way,' the threat actor stated, as quoted by DeXpose. The outlet further conveyed the group's admonition: 'Make the right decision, don’t be the next headline.'

DeXpose notes the increasing prevalence of ransomware attacks targeting organizations of varying scales across all sectors. The cyber intelligence firm outlined critical steps to mitigate impact and prevent future incidents, including continuous monitoring, conducting compromise assessments, and validating backups. They also suggested integrating threat intelligence, hardening employee defenses, and engaging professional response teams prior to any direct communication with ransomware groups.

Our take: The incident underscores the escalating digital vulnerabilities even for brands synonymous with discreet luxury and privacy. In an era where guest data is paramount, particularly for a clientele accustomed to uncompromising discretion, such a breach represents not merely a technical challenge but a profound potential erosion of trust. While the operational intricacies of a cyber attack are outside our usual purview, the ramifications for guest perception and brand integrity are undeniably within it. As we have noted in recent dispatches, digital security is fast becoming as critical to the luxury hospitality proposition as thread count and culinary excellence.

Source : DeXpose

Share this story

The Friday Edit

Five hotel price drops. Two stories.

Confirmed opt-in. Unsubscribe anytime.

Related

In the conversation

Most discussed

The pieces driving the loudest debates in hôtels de luxe this week.

Picked for you

Just for you

A curated mix across reviews, news and analysis you might have missed.