Trump Hotels Allegedly Breached, 164,900 Records Leaked Online

A threat actor known as FutureSeeker has leaked a database allegedly stolen from Trump Hotels, exposing the personal details of over 164,900 individuals. The dataset, allegedly sourced from Trump Hotels' invitations list, was posted on BreachForums yesterday. The leaked records include full names, email addresses, invitation statuses, and timestamps, raising concerns about potential phishing attacks and identity theft.

The hacker shared a downloadable file purportedly containing the Trump Hotels invitation list. The post, which includes sample data, suggests that the breach exposed the following fields for each individual:

• ID: A unique identifier for each record
• Full Name: The individual's full name
• Email Address: Contact emails, including personal and corporate addresses
• Creation Date: The timestamp of when the invitation record was created
• Unit ID: Likely an internal identifier related to hotel properties or rooms
• Status: Indicates whether the invitation was delivered, completed, or pending
• Last Updated: The most recent modification timestamp for the record
• Expiration Date: A deadline linked to the invitation
• Sampling Exclusion: Notes related to data retention policies, including quarantine statuses

The database file contains 164,910 entries, with over 151,000 email addresses exposed.

Trump Hotels and potential impact

Trump Hotels is a luxury hotel chain operated by The Trump Organization, offering high-end accommodations in major global cities. The brand is well known for catering to affluent travelers, business executives, and political figures, making the exposure of guest data particularly concerning.

Several names in the leaked data are common, but the presence of both personal and corporate emails suggests that some affected individuals could be high-profile guests or business associates. If verified, this breach could have serious implications, including the risk of spear phishing attacks impersonating Trump Hotels or other trusted entities, identity theft, and corporate espionage.

At the time of writing, Trump Hotels has not issued a press release about the threat actor's allegations. Also, our attempts to contact the organization and source additional information have gone unanswered. As such, the breach remains unconfirmed.

If you are a customer, monitor email accounts, beware of phishing, and switch passwords on accounts used for hotel bookings and other services. If the option is offered, also enable multi-factor authentication.