2026 Maritim Hotels — Amadeus iHotelier vendor breach; 8,716 guest emails (reservation PII)
Data compromised
Per Maritim: names, postal addresses (without street in spokesperson summary), emails, phones, reservation numbers, booking/stay details (costs, room category, arrival/departure). Payment/financial data, passwords, and passport data not affected. 8,716 notification emails 17 Sep 2026; stays ~1 Aug 2026–30 Sep 2027.
Technical writeup
Verified Maritim Hotelgesellschaft guest notifications — Managing Director Roland Elter confirmed a relevant Datenschutzvorfall at service provider iHotelier (Amadeus IT Group S.A.). Amadeus detected unusual iHotelier-related API activity on 11 September 2026. Maritim sent 8,716 guest emails on 17 September 2026 and notified its supervisory authority (GDPR Art. 33). Data: contact and reservation/stay fields; no payment, password, or passport data. See also catalog row amadeus-ihotelier2026. companyConfirmed true; recordsAffected 8716 (notification emails as attested lower-bound cohort).
Root cause
Vendor incident at Amadeus iHotelier (Amadeus IT Group S.A.); reservation lists with guest information stolen (per Maritim guest notice)
References
- https://www.tageskarte.io/hotellerie/detail/maritim-informiert-gaeste-ueber-datendiebstahl-bei-ihotelier.html
- https://www.hotelvor9.de/inside/datenpanne-bei-amadeus-betrifft-gaeste-von-maritim
- https://www.hogapage.de/nachrichten/netzwelt/web/maritim-informiert-tausende-gaeste-nach-datenpanne-bei-ihotelier/