Minor International is a publicly listed hospitality and leisure conglomerate headquartered in Bangkok. The company operates a sprawling attack surface: over 560 hotels and resorts across six continents - including brands like Anantara, Avani, NH Hotels, Tivoli, and Elewana - plus restaurants and retail outlets in more than 60 countries. That's over 80,000 rooms, thousands of employees, and a point-of-sale and booking infrastructure that spans the globe.
For a security team, the threat model is broad and operationally concrete. Think payment card data in high-volume hospitality environments, guest PII flowing through booking platforms across jurisdictions, and the operational technology risks embedded in property management systems. The company's recent SBTi-validated emissions targets suggest active investment in long-term infrastructure and digital transformation - expanding the surface further.
Founded in 1967, Minor International has grown through acquisitions into one of the Asia Pacific region's largest operators. A cybersecurity function here isn't protecting a single product - it's defending a multi-vertical, multi-brand operation where a breach at any node has cascading consequences across hospitality, dining, and retail.
