Wyndham Improves Threat Detection and Response While Scaling Security Operations

About Wyndham:

• Industry: Hospitality
• Company Type: Hotels & Resorts
• Company Size: 130,000+ employees
• A global hospitality company with 25 brands in 95 countries and over 9,100 hotels and resorts

The Challenge

When analysts spend their days toggling between dozens of tools and browser tabs — manually hunting for context, searching for indicators of compromise, and re-documenting intelligence that already exists somewhere — the organization isn’t just losing time. It’s losing consistency, and creating risk.

That was the reality Wyndham’s security team faced. Alert triage was slowing under the weight of manual data collection and context switching. Searching for IOCs was time-intensive work that pulled analysts away from higher-value decisions. Memorializing new intelligence was labor-intensive, and without a centralized system, analysts struggled to work consistently and efficiently across the team.

The challenge wasn’t a shortage of talent or tools. It was that nothing connected them.

The Solution

Wyndham deployed ThreatConnect, now a part of Dataminr, specifically the Agentic TI Ops solution, combining the Dataminr Agentic Threat Intelligence Platform and Dataminr Investigation Insights — to centralize their threat intelligence operations and bring that intelligence directly into the workflows where analysts do their work.

The Dataminr Agentic Threat Intelligence Platform gave Wyndham a single system of record for intelligence operations: structured, scored, tracked, and applied consistently across detection, response, and analysis. Instead of one-off alerts dissolving into noise, intelligence compounds over time — searchable, reusable, and actionable.

Dataminr Investigation Insights delivered the other half of the picture: threat intelligence and correlated context from hundreds of internal and external knowledge sources — surfaced inline, at the exact moment analysts need it, inside the tools they already use. No more pivoting across screens. No more manual lookups.

Together, they replaced a fragmented, manually intensive workflow with a unified operational system — one where intelligence doesn’t need to be hunted down — it arrives.

The Outcome

Wyndham’s security teams now triage alerts and respond to threats with significantly less complexity. Intelligence, context, and correlated data surface automatically at the point of analysis, decision, and action — freeing up hours of analyst time each day. Across the team, consistency improved: analysts work from the same intelligence, at the same speed, with the same context — regardless of experience level.

Wyndham’s shift from scattered, manual processes to an intel-driven operational system reflects exactly what Dataminr for Cyber Defense is built to deliver: not just faster security operations, but smarter ones — where every analyst has what they need to make confident, defensible decisions, the moment it matters.