Pyramid Global Hospitality Suffers Data Breach Impacting Over 50,000 Individuals Pittsburgh-based Pyramid Global Hospitality ("Pyramid"), a hotel and resort management firm, disclosed a cybersecurity incident in early March 2026 that compromised the personal data of over 50,000 individuals. The breach involved unauthorized access to the company’s human resources (HR) and payroll records, potentially exposing sensitive personally identifiable information (PII). Affected data includes: - Names paired with Social Security numbers - Passport numbers - Driver’s license numbers - Financial account details - Medical or health insurance information The incident is under investigation by Lynch Carpenter, LLP, a national class action law firm specializing in data privacy litigation. The firm is reviewing potential legal claims against Pyramid on behalf of impacted individuals. Pyramid has not publicly disclosed the exact timeline of the breach or the method of unauthorized access. The company manages properties across multiple regions, though the scope of affected locations remains unclear. This breach adds to a growing trend of targeted attacks on HR and payroll systems, which often hold concentrated repositories of sensitive employee and guest data. The exposure of such information heightens risks of identity theft, financial fraud, and insurance-related fraud for those impacted.

Pyramid Global Hospitality Data Breach Exposes Sensitive Personal Information Pyramid Global Hospitality, a major third-party hospitality management firm, confirmed a data breach on August 14, 2025, after the hacking group Worldleaks claimed responsibility and posted stolen data on the dark web on September 23, 2025. The company, formed in 2021 through the merger of three hospitality firms, operates out of Boston, Massachusetts, and The Woodlands, Texas, with additional offices in Cincinnati, Miami, and London, employing approximately 18,000 people. Affected individuals were notified in writing on October 29, 2025, and again on February 25, 2026, the same day the breach was reported to the Maine Attorney General. At least 1,299 Maine residents were confirmed impacted, though the total number of affected individuals nationwide remains undisclosed. The breach exposed a range of sensitive data, including: - Names - Social Security numbers - Driver’s license or state ID numbers - Government identification numbers - Financial account information - Health insurance and medical details The law firm Shamis & Gentile P.A. is investigating the incident, noting that affected individuals may be eligible for compensation. The full scope of the breach and its broader impact are still under review.