Data breach investigation
Omni Hotels & Resorts Data Breach Investigation
November 5, 2026 listing · Unverified REDACT data-theft claim
Hall Attorneys is investigating an unverified extortion claim naming Omni Hotels & Resorts. A public tracker records a November 5, 2026 REDACT listing alleging theft of customer and internal company data. A listing does not establish that a breach occurred or that a particular person’s information was exposed. We are reviewing potential privacy and consumer claims.
What has been reported?
RansomLook records a November 5, 2026 REDACT listing naming Omni Hotels & Resorts. The tracker corroborates the existence of the listing, not the authenticity of the alleged data. Reported figures attributed to the group include:
- About 1.4 TB of allegedly stolen data across 456,430 files.
- A claimed 203 GB of Salesforce-related data containing 1,281,114 customer personal-information records.
- Roughly 1.2 TB described as internal company documents and files.
These are unverified actor claims. The tracker’s listing metadata does not independently validate the detailed Salesforce breakdown. A file count or record count is not a verified count of unique people affected.
November 5 is the listing date, not a confirmed date of unauthorized access or data theft. No affected stay or booking window has been established. Hall Attorneys has not independently verified a new incident, the alleged files, or which guests, employees, or other people, if any, were affected.
What does the claim establish?
The available information does not establish the access method, affected systems, data’s age or origin, or whether the allegation involves a new intrusion, previously exposed records, third-party data, or inauthentic material. Any connection to earlier Omni incidents remains undetermined.
A reference to Salesforce does not establish a breach of Salesforce’s platform or exposure of other Salesforce customers. The listing also does not establish that ransomware encrypted Omni’s systems, that hotel operations are currently disrupted, or that a ransom was paid.
The reported figures do not provide a verified field list. Exposure of payment-card numbers, passwords, Social Security numbers, passport details, or loyalty-account access has not been established for this claim.
What information are we investigating?
Omni’s privacy policy describes collecting guest names, contact information, reservation details, payment information, accommodation preferences, and loyalty-program information in its ordinary operations. It also describes receiving booking information from travel agents, meeting planners, and people making reservations for others. That policy is not a breach notice and does not identify what, if anything, was exposed in this claim.
We are investigating whether guest, loyalty, group-event, business-contact, employee, or vendor information was accessed or disclosed without authorization. These are categories under investigation, not confirmed categories of exposed information.
Our review concerns the evidence supporting the claim, safeguards, notices, assistance provided, and any documented privacy consequences, losses, or response costs. Individual exposure and legal responsibility remain undetermined.
Who should contact Hall Attorneys?
We would like to hear from current or former Omni guests, Select Guest members, group or event customers, employees, vendors, and authorized representatives with related concerns, particularly those who:
- Received a security notice identifying Omni or information connected to an Omni stay, booking, event, account, or employment.
- Received suspicious calls, texts, payment requests, or refund offers using accurate, nonpublic reservation, loyalty, event, or employment details.
- Observed unfamiliar account changes, disputed charges, or other activity and have information suggesting a connection to this claim.
- Spent time or money protecting accounts, disputing activity, or responding to a potentially related privacy concern.
You may request a review even if someone else booked for you or you never created an online account. Staying at an Omni hotel, holding a loyalty account, or working with Omni does not by itself establish exposure. Suspicious activity alone does not establish a connection to the claim.
How should you check an unexpected message?
The Federal Trade Commission recommends verifying suspicious messages through a telephone number or website you already know is genuine. Use Omni’s official website, established hotel contact information, or its contact page to check an unexpected booking, payment, refund, or account-security request.
Do not share passwords or verification codes with an unexpected caller, approve an unfamiliar sign-in, or pay a new deposit solely because a message includes real booking details. Such details do not prove the sender is genuine or establish where the information came from.
Contact Omni and any relevant financial institution promptly about urgent account or payment concerns. A request for legal review does not submit a fraud report, billing dispute, or reservation change to Omni.
What should you preserve?
Keep security notices, envelopes, original suspicious messages, reservation or event confirmations, account alerts, support correspondence, and records of disputed charges or response costs. Note relevant dates and whether a refund or credit was provided. Describe the records you already hold before sending them.
Do not search for, purchase, download, or share allegedly stolen records. Do not send Social Security numbers, passport or identity documents, passwords, verification codes, complete payment-card or bank-account numbers, reservation access codes, or confidential employee or customer files in an initial email or website submission.
Contact Hall Attorneys
Provide your name, state or country of residence, a safe way to reach you, your relationship to Omni, and whether you received a security notice. Briefly describe when your concern arose and any related response costs. Approximate stay or booking dates are sufficient for an initial inquiry; do not send a full reservation access code.
Let us know whether it is safe to leave a voicemail. Keep sensitive records until we discuss what is needed and an appropriate way to provide them.
Nicholas Hall
Email: nhall@hallattorneys.com
Request a Case ReviewAttorney Advertising. Responsible attorney: Nicholas Hall, Hall Attorneys, P.C., Edna, Texas. Hall Attorneys is not affiliated with Omni Hotels & Resorts or Salesforce. This page describes an investigation into an unverified claim, not a filed lawsuit by Hall Attorneys concerning this claim. Individual exposure, legal responsibility, and compensation have not been determined. It provides general information, not legal advice. Contacting the firm or submitting information does not create an attorney-client relationship. No outcome is guaranteed.