SevenRooms

SevenRooms, also known by its alias, is a restaurant customer relationship management platform headquartered in the United States of America. The company provides software solutions designed specifically for the hospitality sector, focusing on restaurants and related food service establishments. Its primary offering enables clients to manage interactions with guests, streamline reservation processes, and support marketing initiatives.

Through its platform, SevenRooms stores and processes various types of operational data, including reservation lists that detail booking times and party sizes. The system also maintains guest information such as names, email addresses, and telephone numbers to facilitate personalized service. In addition, it handles promotional codes used for marketing campaigns and generates payment reports that summarize transaction activity. Application programming interface credentials are managed within the environment to allow third‑party integrations with other hospitality tools.

On December 15, 2022, SevenRooms disclosed a data breach that originated from unauthorized access to a third‑party vendor’s file transfer interface. The threat actor subsequently advertised stolen data for sale, which included API credentials, promotional codes, payment reports, reservation lists, and guest contact details. The company confirmed that its proprietary systems were not compromised and that highly sensitive data such as payment card details or Social Security numbers were not exposed. Upon discovery, access to the affected file transfer interface was immediately disabled to prevent further unauthorized entry. An internal investigation was launched, assisted by independent cybersecurity experts, to determine the scope and cause of the incident. As part of the remediation, expired API credentials were rendered invalid to reduce the risk of misuse. The breach is likely to have impacted the hospitality clients that use the SevenRooms platform and, consequently, their end‑customer guests. No further details about the organization's size, ownership structure, or subsidiary relationships are publicly available in the provided sources.