Aman aman.com Aman data breach: what happened and what to do
In April 2026, luxury hotel brand Aman was named in a ShinyHunters pay-or-leak extortion campaign. About 215,000 email addresses leaked with names, phone numbers, addresses, dates of birth, nationalities and spouse names.
View all 13,177 breaches- Breach date
- 20 Apr 2026
- Affected
- 215,563
- Data exposed
- Dates of birth, Email addresses, Genders, Language preferences, Names, Nationalities, Phone numbers, Physical addresses, Spouses names, VIP statuses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
In April 2026, the ultra-luxury hotel brand Aman was named by ShinyHunters as the target of a "pay or leak" extortion campaign. The data was allegedly obtained from Aman's Salesforce CRM. According to Have I Been Pwned, the data was then leaked publicly and held 215,563 unique email addresses. SC Media covered the wider leak, which hit several companies.
Sources checked: haveibeenpwned.com, scworld.com, consumer.ftc.gov
Last verified against the official page:
What was exposed
Not every record has every field. The data includes names, email addresses, phone numbers, physical addresses, genders, nationalities, dates of birth, language preferences, spouse names and VIP status codes.
What that means for you
Guest profiles like this suit targeted scams. A fraudster who knows you stay at luxury hotels, your spouse's name and your date of birth can write a believable booking or payment message. Date of birth plus name and address is also useful for identity theft.
What to do
Be wary of any message about a reservation, deposit or "VIP" offer, and contact the hotel through its official site. If your date of birth leaked, consider a credit freeze.
What to do if you were in it
- 1
Expect phishing that mentions the breach
Reservation details and VIP status make fake booking or payment requests look real. Don't click links or call numbers in unexpected messages. Go to the company's site yourself, and report scam messages at reportfraud.ftc.gov.
- 2
Consider a credit freeze
Your date of birth leaked with your name and address. A freeze at Equifax, Experian and TransUnion is free, per the FTC, and blocks most new accounts in your name.
- 3
Confirm bookings directly
If a message asks for a deposit or card details, contact the hotel using a number from its official website.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email or phone number. Serus also alerts you when your details show up in a new one.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the Aman breach?
If you're an Aman guest or contact, possibly. Search your email on Have I Been Pwned or run a free Serus scan.
What was exposed?
Names, email addresses, phone numbers, physical addresses, genders, nationalities, dates of birth, language preferences, spouse names and VIP status codes, though not on every record.
Who is ShinyHunters?
Have I Been Pwned and SC Media name ShinyHunters as the group behind the extortion campaign.
Should I change my password?
No passwords are listed in this breach. Reused passwords are worth changing anyway.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
