NEW DELHI: Taj Hotels has suffered a data breach which could have exposed personal details of 15 lakh people.

A threat actor called "Dnacookies" is learnt to have demanded $5,000 for the full dataset, which includes addresses, membership IDs, mobile numbers and other personal identifiable information.

A spokesperson for Taj parent Indian Hotels Company (IHCL) said: "We have been made aware of someone claiming possession of limited customer data set of non-sensitive nature.Safety and security of customers' data is of paramount importance.

We have notified authorities.

We continue to monitor our systems and there is no suggestion of any current or ongoing security issue or impact on business operations."