Taj Hotel Data Breach: Company Investigating Claims

New Delhi: Tata group hospitality firm Indian Hotels Company Ltd (IHCL) is investigating claims of a data breach, but asserted there is no suggestion of any current or ongoing security issue. According to a media report, there has been a personal data breach of 15 lakh users from the Taj Hotel database, which is available on the dark web for purchase at USD 5,000.

Data Breach of 15 Lakh Users

In a statement, IHCL spokesperson said, "We have been made aware of someone claiming possession of a limited customer data set which is of non-sensitive nature." Asserting that safety and security of customers data is of paramount importance to the company, the spokesperson said, "We are investigating this claim and have notified the relevant authorities."

No Current or Ongoing Security Issue

The spokesperson further said, "We continue to monitor our systems and there is no suggestion of any current or ongoing security issue or impact on business operations." IHCL runs a number of hospitality properties under the Taj, SeleQtions, Vivanta, and Ginger, among others.

Data from 2014 to 2020

As per the report, an unidentified individual named Dnacookies is offering the entire dataset containing membership IDs, addresses, phone numbers, and other personally identifiable information for USD 5,000. The customer data is from 2014 to 2020. It added that cybersecurity watchdog and the Indian Computer Emergency Response Team (CERT-In) is aware of the breach.

The data breach of 15 lakh users from the Taj Hotel database is a serious issue and the company is investigating the claim. However, the company has assured that there is no suggestion of any current or ongoing security issue or impact on business operations.