A hacker is selling the personal details of over 130 million hotel guests for 8 Bitcoin (USD 56,000) on a Chinese Dark Web forum. The seller said he obtained the data from Huazhu Group which operates 13 hotel brands across 5,162 hotels in 1,119 Chinese cities.

According to a description the hacker posted online, the stolen data is 141.5GB in size, contains 240 million records, with information on roughly 130 million hotel guests that stayed at one of Huazhu hotel brands —Hanting Hotel, Grand Mercure, Joye, Manxin, Novotel, Mercure, CitiGo, Orange, All Season, Starway, Ibis, Elan, Haiyou.

A Huazhu spokesperson did not answer a request for comment from Bleeping Computer, but the hotel chain published a statement on Chinese social network Weibo. A spokesperson said the company is still investigating the breach and that authorities have been notified.

Chinese cyber-security firm Zibao told a local news outlet that they've verified the data and said to be authentic, adding that the cause of the breach appears to be a mistake on the part of the Huazhu's development team.