Bug bounty program
HH
Hyatt Hotels
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Hyatt WeChat Secret, Baidu AK Secret, and mysql db credentials inadvertantly made publicly available#478813 | No weakness recorded | – | $300 | 16 |
Subdomains3,607
| Name | Scope | First seen |
|---|---|---|
| www.guatemalacity.centric.hyatt.com | Not in the scope | 2026-11-14 |
| keywest.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.keywest.centric.hyatt.com | Not in the scope | 2026-11-14 |
| larosiere.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.larosiere.centric.hyatt.com | Not in the scope | 2026-11-14 |
| lascascadassansalvador.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.lascascadassansalvador.centric.hyatt.com | Not in the scope | 2026-11-14 |
| lascondessantiago.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.lascondessantiago.centric.hyatt.com | Not in the scope | 2026-11-14 |
| leventistanbul.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.leventistanbul.centric.hyatt.com | Not in the scope | 2026-11-14 |
| montevideo.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.montevideo.centric.hyatt.com | Not in the scope | 2026-11-14 |
| parkcity.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.parkcity.centric.hyatt.com | Not in the scope | 2026-11-14 |
| sanisidrolima.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.sanisidrolima.centric.hyatt.com | Not in the scope | 2026-11-14 |
| santabarbara.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.santabarbara.centric.hyatt.com | Not in the scope | 2026-11-14 |
| southbeachmiami.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.southbeachmiami.centric.hyatt.com | Not in the scope | 2026-11-14 |
| thelibertiesdublin.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.thelibertiesdublin.centric.hyatt.com | Not in the scope | 2026-11-14 |
| theloopchicago.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.theloopchicago.centric.hyatt.com | Not in the scope | 2026-11-14 |
| thepikelongbeach.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.thepikelongbeach.centric.hyatt.com | Not in the scope | 2026-11-14 |
| thewoodlands.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.thewoodlands.centric.hyatt.com | Not in the scope | 2026-11-14 |
| timessquare.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.timessquare.centric.hyatt.com | Not in the scope | 2026-11-14 |
| waikikibeach.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.waikikibeach.centric.hyatt.com | Not in the scope | 2026-11-14 |
| www.centric.hyatt.com | Not in the scope | 2026-11-14 |
| centrtdm.hyatt.com | Not in the scope | 2026-11-14 |
| tokyo.century.hyatt.com | Not in the scope | 2026-11-14 |
| centuryplaza.hyatt.com | Not in the scope | 2026-11-14 |
| www.centuryplaza.hyatt.com | Not in the scope | 2026-11-14 |
| cerromarbeach.hyatt.com | Not in the scope | 2026-11-14 |
| certificates.hyatt.com | Not in the scope | 2026-11-14 |
| www.certificates.hyatt.com | Not in the scope | 2026-11-14 |
| cfgmgr.hyatt.com | Not in the scope | 2026-11-14 |
| paris.charlesdegaulle.hyatt.com | Not in the scope | 2026-11-14 |
| www.paris.charlesdegaulle.hyatt.com | Not in the scope | 2026-11-14 |
| charlotte.hyatt.com | Not in the scope | 2026-11-14 |
| chase.hyatt.com | Not in the scope | 2026-11-14 |
| chat.hyatt.com | Not in the scope | 2026-11-14 |
| checkmarx.hyatt.com | Not in the scope | 2026-11-14 |
| www.checkmarx.hyatt.com | Not in the scope | 2026-11-14 |
| chesapeakebay.hyatt.com | Not in the scope | 2026-11-14 |
| www.chesapeakebay.hyatt.com | Not in the scope | 2026-11-14 |
| chicago.hyatt.com | Not in the scope | 2026-11-14 |
| www.chicago.hyatt.com | Not in the scope | 2026-11-14 |
| chicagomagnificentmile.hyatt.com | Not in the scope | 2026-11-14 |
| www.chicagomagnificentmile.hyatt.com | Not in the scope | 2026-11-14 |
| chicagoregency.hyatt.com | Not in the scope | 2026-11-14 |
| www.chicagoregency.hyatt.com | Not in the scope | 2026-11-14 |
| fss.chico.hyatt.com | Not in the scope | 2026-11-14 |
| fss1.chico.hyatt.com | Not in the scope | 2026-11-14 |
| fss3.chico.hyatt.com | Not in the scope | 2026-11-14 |
| chicomta03.hyatt.com | Not in the scope | 2026-11-14 |
| chsdh-dip2-v.hyatt.com | Not in the scope | 2026-11-14 |
| www.chsdh-dip2-v.hyatt.com | Not in the scope | 2026-11-14 |
| chsdh-ig-beachy.hyatt.com | Not in the scope | 2026-11-14 |
| london.churchill.hyatt.com | Not in the scope | 2026-11-14 |
| www.london.churchill.hyatt.com | Not in the scope | 2026-11-14 |
| cincinnati.hyatt.com | Not in the scope | 2026-11-14 |
| www.cincinnati.hyatt.com | Not in the scope | 2026-11-14 |
| citrixpm.hyatt.com | Not in the scope | 2026-11-14 |
| cityofdreamsmanila.hyatt.com | Not in the scope | 2026-11-14 |
| www.cityofdreamsmanila.hyatt.com | Not in the scope | 2026-11-14 |
| clearwaterbeach.hyatt.com | Not in the scope | 2026-11-14 |
| www.clearwaterbeach.hyatt.com | Not in the scope | 2026-11-14 |
| cleveland.hyatt.com | Not in the scope | 2026-11-14 |
| www.cleveland.hyatt.com | Not in the scope | 2026-11-14 |
| click.hyatt.com | Not in the scope | 2026-11-14 |
| www.click.hyatt.com | Not in the scope | 2026-11-14 |
| cloudpath.hyatt.com | Not in the scope | 2026-11-14 |
| www.cloudpath.hyatt.com | Not in the scope | 2026-11-14 |
| cm.hyatt.com | Not in the scope | 2026-11-14 |
| cnfuse.hyatt.com | Not in the scope | 2026-11-14 |
| coconutpoint.hyatt.com | Not in the scope | 2026-11-14 |
| www.coconutpoint.hyatt.com | Not in the scope | 2026-11-14 |
| cognosuat.hyatt.com | Not in the scope | 2026-11-14 |
| www.cognosuat.hyatt.com | Not in the scope | 2026-11-14 |
| colog-mbg.hyatt.com | Not in the scope | 2026-11-14 |
| colog-mc.hyatt.com | Not in the scope | 2026-11-14 |
| www.colog-mc.hyatt.com | Not in the scope | 2026-11-14 |
| cologne.hyatt.com | Not in the scope | 2026-11-14 |
| www.cologne.hyatt.com | Not in the scope | 2026-11-14 |
| columbus.hyatt.com | Not in the scope | 2026-11-14 |
| www.columbus.hyatt.com | Not in the scope | 2026-11-14 |
| columbusregency.hyatt.com | Not in the scope | 2026-11-14 |
| www.columbusregency.hyatt.com | Not in the scope | 2026-11-14 |
| comms.hyatt.com | Not in the scope | 2026-11-14 |
| concoursehotellax.hyatt.com | Not in the scope | 2026-11-14 |
| www.concoursehotellax.hyatt.com | Not in the scope | 2026-11-14 |
| console-linecrm.hyatt.comadmin | Not in the scope | 2026-11-14 |
| coolum.hyatt.com | Not in the scope | 2026-11-14 |
| www.coolum.hyatt.com | Not in the scope | 2026-11-14 |
15 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.