Logis Hotels: 598,000 loyalty program members exposed in massive leak

On 14 April 2026, Logis Hotels — a major network of more than 6,300 independent hotels and restaurants across France and Europe — was hit by a claimed data breach affecting its ETIK loyalty program. A cybercriminal operating under the alias HexDex announced the theft of a member database and put it up for sale, with the records reportedly spanning roughly 14 years of activity, from 2012 to 2026.

According to the threat actor's claim, the leak concerns 598,154 loyalty program members. The same day, Logis Hotels notified its ETIK customers by email about a malicious intrusion into its database, though the group had not formally confirmed the authenticity or full scope of the leaked dataset at the time of disclosure.

The data categories described as exposed include:

• Identity details (name, date of birth, company affiliation)
• Contact information (email, phone, postal address) and marketing consents
• Loyalty card numbers, status, enrollment dates, point balances and transaction histories
• Billing information and gift card / voucher codes
• Authentication credentials (logins and account roles)
• Hotel partner and internal referential data

The exposure of this combination of identity, contact and account data creates a heightened risk of targeted phishing, identity theft, loyalty-account fraud and travel-related social engineering against affected members. As the dataset was being offered for sale and no remediation has been confirmed, the incident remains ongoing.