Pyramid Global Hospitality Data Breach Affects 139k People

Pyramid Advisors Limited Partnership dba Pyramid Global Hospitality recently experienced a data breach that has impacted individuals across the United States.

According to the Oregon Attorney General's disclosure, a total of 139,899 people were impacted across the country.

Affected individuals by state:

• Indiana: 1,824
• Maine: 1,299
• Massachusetts: 9,141
• South Carolina: 2,855
• Texas: 15,255
• Washington: 3,434

The breach was first discovered on Aug. 14, 2025, and was disclosed to the attorneys general offices of California, Indiana, Maine, Massachusetts, South Carolina, Texas, Vermont, and Washington starting on Feb. 25, 2026. According to the disclosure filing, the breach involved unauthorized access to sensitive personal and health information.

The types of information exposed in the breach include personally identifiable information (PII) such as name, Social Security number, driver’s license number or state identification number, other governmental identification numbers and financial account information. In addition, protected health information (PHI) such as health insurance information and medical information was also compromised.

The Worldleaks group claimed responsibility for the attack, posting about the breach on the dark web network tor on Sept. 23, 2025.

Pyramid began notifying affected individuals by written notice, with notification dates listed as Oct. 29, 2025, and Feb. 25, 2026.

Pyramid Global Hospitality’s response

The company is offering complimentary identity protection and credit monitoring services through IDX, which affected individuals can activate online or by phone. These services are designed to help monitor for suspicious activity and provide assistance in the event of identity theft.

Pyramid has encouraged all affected individuals to remain vigilant by reviewing account statements and monitoring their free credit reports for any signs of fraud or errors.

The company has also provided detailed instructions for placing a fraud alert or credit freeze with the major credit bureaus, which can help prevent unauthorized use of personal information. Additional resources and contact information for the Federal Trade Commission and state attorneys general have been made available for those seeking further guidance.