Trump Hotels Alleged Data Breach Potentially Leaks Over 160K Guest Records

• A relatively new hacker claimed a Trump Hotels data breach that exposed sensitive details of guests.
• The database was allegedly exfiltrated via the Hotels’ website and leaked for free.
• Yet, the 160,000 stolen rows could translate into around 100,000 unique email addresses.

A Trump Hotels data breach was allegedly made available for free in an online forum frequented by cyber criminals by a hacker going by the alias FutureSeeker, who claimed to have approximately 165,000 rows of data.

The relatively new forum member has assumed responsibility for leaking a database purportedly containing 164,910 records from an invitation list associated with the Trump Hotels official website’s email notification system.

Security expert Troy Hunt said the breach boils down to 118,000 unique email addresses, which go down to about 100,000 after removing generated email addresses from Expedia and Booking.com.

According to the post, the exposed dataset reportedly includes:

• Full names  
• Email addresses  
• Account creation dates  
• Unit ID
• Status
• Update date
• Expiration date
• Additional unspecified details  

While the authenticity of the claims has not yet been independently verified, these details, if legitimate, place individuals listed in the database at heightened risk of malicious cyber activities.

Trump Hotels has not yet confirmed or denied FutureSeeker's claims. Still, if proven true, the leaked information could be leveraged for phishing campaigns, spearphishing attacks, and other forms of social engineering. 

Vendors and organizations are urged to closely monitor related activity and educate their clients about potential scams involving impersonation attempts or fraudulent communications.

These allegations come after the re-elected U.S. President made controversial declarations, including “taking over” Gaza, weakening U.S. relations with Europe, claiming Greenland, and the recent introduction of a broad-based 10% tariff on Chinese imports to America.

Last year, Chinese threat actor  Salt Typhoon infiltrated Verizon and allegedly accessed Trump's phone data, among other political figures.