Shangri-La Asia Limited

Profile narrative

Shangri-La, also known as Shangri-La Asia Limited and Shangri-La Hotels and Resorts, is a hospitality organisation headquartered in Hong Kong. Its core business, as indicated by its names and incident material, is hotels and resorts. It serves guests through property operations that maintain customer records such as names, contact details, passport numbers, and payment-related data. The available information does not state a total property count, revenue, employee count, or full market footprint. The confirmed scale reference is that one intrusion affected guest databases across eight Asian properties.

The affected databases reportedly contained encrypted personal information, including contact details, passport numbers, and credit card data. Investigators could not confirm the exact content of any exfiltrated files, and the organisation stated that it found no evidence of guest data misuse. During the incident period, a high-profile security summit was hosted at one affected location, but summit organizers said attendee data was held on separate servers and remained secure. Shangri-La responded by securing affected systems, launching an investigation with external cybersecurity experts, notifying impacted customers and regulatory authorities, and offering identity monitoring services to affected individuals. Operations reportedly continued with minimal disruption while enhanced security measures were implemented. The incidents highlighted vulnerabilities associated with third-party data handling processes in the hospitality sector. Structurally, the available information identifies Shangri-La Asia Limited as the corporate name and Shangri-La and Shangri-La Hotels and Resorts as aliases; no parent-subsidiary relationship or ownership structure is specified.

Incidents

2 incidents linked to this organisation.