The Hard Rock and Loews hotel chains alerted patrons to security breaches; the issues are connected to a hack of the Sabre company's SynXis network. Payment card information for a "small subset" of clients who made bookings using the SynXis platform which was supplied by outside vendor Sabre Hospitality Solutions was obtained by thieves. After taking control of an internal account on the SynXis system, the hackers were able to access the system. The conclusion of the inquiry into the Hard Rock Hotels and Casinos franchise breach. The Federal Trade Commission and the company's consumers were informed of the event.

The California Office of the Attorney General reported a data breach involving Hard Rock International on July 7, 2017. The breach occurred on May 17, 2017, and was attributed to unauthorized access to payment card information and reservation details via Sabre Hospitality Solutions, with potential exposure of guest names, email addresses, and other visit-related information.

The Hard Rock Hotel & Casino Las Vegas suffered a payment card breach caused by unauthorized access via card-scraping malware. The incident, reported by the California Office of the Attorney General, exposed payment card data of guests who made transactions at the hotel between October 27, 2015, and March 21, 2016. While the exact number of affected individuals and the specific types of compromised information (e.g., card numbers, CVV, or personal details) remain undisclosed, the breach highlights a financial and reputational risk due to potential fraudulent transactions or misuse of payment data. The attack was executed through malware designed to steal card details during processing, a common tactic in cybercriminal operations targeting hospitality and retail sectors. The lack of transparency on the scale of the breach further amplifies concerns over the hotel’s data security measures and the potential long-term impact on customer trust.

The California Office of the Attorney General reported a data breach involving Hard Rock Hotel & Casino on April 30, 2015. The breach may have allowed unauthorized access to credit and debit card information used at certain hotel retail and service locations between September 3, 2014, and April 2, 2015, potentially affecting customer names, card numbers, and CVV codes, but not PIN numbers. The total number of individuals affected by the breach is unknown.