2018 Huazhu Hotels — 500M records
Data compromised
IDs, emails, passwords, booking records
Technical writeup
Credentials on GitHub. 123M registration (IDs, emails, passwords), 240M bookings. 66GB on dark web, 8 BTC. Hanting, Orange, Ibis.
Root cause
Credentials on GitHub