Radisson Hotel Group

Profile narrative

Radisson Hotel Group, also known as Radisson, is a hospitality organisation whose core business is hotels and related lodging services. Its activities include managing, franchising, and developing hotel properties across a portfolio of brands. The group is associated with brands such as Radisson Collection, Radisson Blu, Radisson, Radisson RED, Park Plaza, Park Inn by Radisson, Country Inn & Suites by Radisson, and Prizeotel. These brands place the organisation across several hospitality segments, including upscale, lifestyle, and select-service hotel markets. Its services are directed at guests in business and leisure travel markets. The organisation is identified as being headquartered in the United States of America.

The available context describes Radisson as a multi-brand hotel group with an international character. The 2018 incident description states that the organisation operates multiple hotel brands across numerous countries, but it does not provide a property count, employee count, or guest count. This supports describing the group as having a broad geographic footprint without assigning a specific size. Its sector positioning is in commercial hospitality, where brand portfolios, reservations, loyalty programmes, and guest-data handling are central to operations. The incident records also show that Radisson maintains customer membership relationships through loyalty-programme systems.

Relevant structural information identifies Choice Hotels as the parent company of Radisson Hotels Americas. In a 2023 incident, a threat actor exploited a zero-day vulnerability in the MOVEit file-transfer application, compromising guest data from Radisson Hotels Americas. Choice Hotels confirmed that a limited number of guest records were accessed. The Cl0p ransomware gang claimed responsibility for the broader MOVEit campaign and used double extortion, although data from this specific victim was not published on the gang’s leak site. A separate 2018 incident involved unauthorized access to a loyalty program database, exposing personal details including names, addresses, email contacts, and in some cases company affiliations, phone numbers, membership identifiers, and frequent flyer details. That intrusion was detected weeks after the initial compromise, affected fewer than 10% of loyalty members according to the notification estimate, and did not expose payment card data or account credentials.

Incidents

2 incidents linked to this organisation.