Data breach reported for Pyramid Advisors Limited Partnership d/b/a Pyramid Global Hospitality

Key Facts: Pyramid Global Hospitality Data Breach

• Date reported: February 25, 2026.
• Unauthorized access identified: August 13 – August 14, 2025.
• Target entity: Pyramid Global Hospitality (Pyramid Advisors Limited Partnership).
• Source of breach: WorldLeaks Ransomware Group (Data Extortion).
• Data types: Names, Social Security Numbers, Passports, Driver’s Licenses, Financial Accounts, and Medical/Health Insurance info.
• Status: Confirmed; official notice letters issued February 25, 2026.

What happened in the Pyramid Global Hospitality data breach?

Pyramid Global Hospitality (pyramidglobal.com) reported a data breach incident on February 25, 2026. Forensic investigations confirmed that the WorldLeaks ransomware group gained unauthorized access to internal systems between August 13 and August 14, 2025.

The report indicates that Pyramid Advisors Limited Partnership, doing business as Pyramid Global Hospitality, experienced a sophisticated data exfiltration event. While the breach was detected in late 2025, the process of identifying the 52,100+ affected individuals concluded in early February 2026. This incident is classified as high severity because it involved the theft of highly sensitive personal identifiers from HR and payroll databases. Such events carry significant long-term risks of identity theft and financial fraud for current and former employees and associates.

Who is behind the incident?

The WorldLeaks group is responsible for the incident. They are a specialized cybercriminal organization that focuses on "extortion-only" attacks, where they steal sensitive corporate and personnel data to demand a ransom rather than encrypting the company's computers.

Impact and risks for Pyramid Global Hospitality customers

For affected individuals, a data breach involving Social Security numbers and medical records carries severe risks, including identity theft, medical fraud, and targeted phishing campaigns. Because the compromised data includes permanent government identifiers like Passports and SSNs, malicious actors can leverage this information indefinitely. Common outcomes of such breaches include unauthorized financial account access or fraudulent tax filings.

Frequently Asked Questions

What happened in the Pyramid Global Hospitality security breach?

On February 25, 2026, Pyramid Global Hospitality (pyramidglobal.com) disclosed a security breach. According to confirmed reports, the company experienced a data exfiltration event involving names, SSNs, and medical information belonging to over 52,000 individuals.

When did the Pyramid Global Hospitality breach occur?

The Pyramid Global Hospitality breach was publicly reported on February 25, 2026. The unauthorized access was active during a 48-hour window between August 13 and August 14, 2025.

What data was exposed?

The types of data involved include full names, Social Security numbers, driver’s license numbers, passport numbers, financial account details, and health insurance information.

Is my personal information at risk?

If you are a current or former employee, contractor, or associate of Pyramid Global Hospitality, there is a high possibility your personal information was affected. While hotel guest data appears unaffected, individuals in the corporate database should take immediate precautionary measures.

How can I protect myself after this data breach?

• Change passwords for associated accounts
• Enable multi-factor authentication (MFA)
• Monitor financial accounts for suspicious activity
• Watch for phishing emails or messages
• Use breach monitoring tools to track data leaks
• File Taxes Early. This prevents criminals from using your stolen SSN to claim a fraudulent refund.

What steps should companies take after being impacted by this breach?

Organizations typically secure affected systems, notify impacted parties, and provide guidance on protective actions. They may also review internal security measures and deploy attack surface management tools to prevent future incidents.