I worked with a GM years ago who kept a binder behind the front desk labeled "Emergency Procedures." It was three inches thick, laminated tabs, the whole production. I asked the night auditor if she'd ever opened it. She looked at me like I'd asked if she'd read the phone book. "I know where the panic button is," she said. "That's my emergency procedure."

That's the gap. And it's the gap that gets people hurt.

Two people were shot at a hotel in Pinellas County this week. This comes less than three weeks after a 76-year-old woman was found murdered in a hotel room at another property in the same county. In that case, surveillance footage showed the suspect entering with the victim and leaving alone hours later. A hotel employee discovered the body. The suspect had a lengthy criminal record in the area... burglary, grand theft, battery. He was arrested and charged with second-degree murder. In the shooting this week, investigators say the individuals involved knew each other, which law enforcement frames as "no threat to the public." Cold comfort if you're the housekeeper who heard the gunshots. Cold comfort if you're the GM whose property is now a crime scene and a news headline.

Here's the thing nobody in the C-suite wants to talk about honestly. Hotels are, by design, open environments. Anybody can walk in. That's the product. That's the promise. "Welcome." But welcome is a security vulnerability, and most properties are running with the bare minimum... a camera system that may or may not be recording, locks that may or may not be re-keyed properly, and a staff that has never once rehearsed what to do when something violent happens on property. Florida law holds hotels to a non-delegable duty to provide reasonably safe premises, including protection against third-party criminal acts. "Reasonably safe" is going to be defined by a plaintiff's attorney after the fact, and they're going to ask what you did BEFORE the incident. If the answer is "we had a binder," you're going to have a very expensive conversation with your insurance carrier (assuming your carrier hasn't already restricted your A&B coverage, which is happening more and more in high-incident markets).

The insurance piece is where this gets real for owners. Underwriters are increasingly pulling location-level crime data during renewals. If your property sits in a zip code with elevated incident rates, your premiums are going up or your coverage is narrowing... or both. And if you've had an on-property incident without documented evidence of proactive security measures, good luck. The industry's liability exposure on assault and battery claims has been climbing for years, and the carriers know it. They're pricing it in whether you are or not.

I've seen this movie before. A violent incident happens. The brand sends a memo. The management company schedules a conference call. Somebody orders new signage for the parking lot. And then nothing changes at 2 AM when one person is running the building alone. The question isn't whether your property has a security plan. The question is whether the person working the overnight shift right now, tonight, knows exactly what to do if they hear gunshots. If you're not sure... that's your answer.

$22 billion in U.S. severe convective storm losses through June 18, 2026. Eleventh consecutive year above $20 billion. The June outbreak alone sits in the mid-single-digit billions, concentrated across Chicago, Denver, Dallas-Fort Worth, Milwaukee, D.C., and New York. Those aren't secondary markets. That's a significant share of the country's branded hotel inventory sitting inside geographic risk pools that just generated catastrophic reinsurer losses.

Here's what the headline doesn't tell you. The broader reinsurance market was actually softening in early 2026. Property-catastrophe reinsurance rates dropped 14.7% at January renewals and another 15-25% at June 1 renewals. Record reinsurer capital. Benign 2025 catastrophe season. Owners with Q1 renewals may have caught a brief window of relief. That window is closing. When reinsurers reprice, they reprice by geography, not by individual claim history. Your hotel in the Chicago metro didn't lose a shingle. Doesn't matter. You're in the same risk pool as the properties that lost roofs. CBRE pegged hotel insurance cost increases at 19.5% in 2023 versus 2022. Some owners have reported costs doubling or tripling since 2020. This event doesn't create a new trend. It accelerates the existing one in the six markets that can least afford it.

There's a secondary P&L angle that's getting less attention. Storm damage to residential properties historically drives extended-stay demand. Displaced homeowners, insurance adjusters, remediation crews... they all need rooms, often for weeks. Economy and select-service properties near heavily damaged residential corridors in Chicago, Denver, and Dallas are sitting on a demand pocket right now. The operators who move first (contacting insurance adjusters, corporate relocation firms, FEMA liaisons) capture that revenue. The ones who wait get the overflow after the extended-stay brands fill up.

Two forces hitting the same P&L from opposite directions. Insurance expense rising on one line. Potential demand rising on another. The net effect depends entirely on how fast you move on both. Owners modeling 2027 NOI without adjusting their insurance assumptions for this event are building on a number that's already wrong. And operators in affected markets who aren't making calls to relocation firms this week are leaving revenue on the table that has a very short shelf life.

A regular at my blues club in Chicago back in the day, managed a hotel during the first Gulf War. Not in the Middle East... stateside, in a market with a large military installation nearby. I remember the week the threat level went up and he told me he got a call from local law enforcement suggesting he "review his properties security posture." That's government-speak for "we don't know what's coming and neither do you." He had a 280-key full-service hotel, a security team of three, and a corporate office that sent a PDF about "situational awareness." That PDF didn't help him figure out what to tell his front desk team when a guest asked if the hotel was safe.

That was a vague, indirect, maybe-something-happens situation. What's happening right now in the Middle East is different by orders of magnitude. Iran's state media, directly linked to the Revolutionary Guard, published specific hotel names... including a Four Seasons and a Sheraton... and called them legitimate military targets. Their claim is that US personnel are sheltering in civilian hotels. Whether that's true, partially true, or propaganda doesn't matter to the GM running a property in the Gulf right now. What matters is that a sovereign nation just told the world it considers your building a valid thing to shoot at. And this isn't hypothetical posturing. A property in Dubai has already taken damage. Dubai's airport was hit by a drone strike two weeks ago. Eleven people have reportedly died from strikes on hotels, airports, and residential buildings in Gulf states since this conflict started February 28th.

Let me be direct about what this means beyond the Middle East. The ripple effects are already massive... 80,000 hotel bookings cancelled across the Gulf, over 20,000 flights cancelled globally, and an estimated $600 million per day in lost visitor spending across Gulf tourism markets. Per day. That number is almost incomprehensible, but it's real, and it's hitting ownership groups, management companies, and individual properties in ways that will take years to fully unwind. If you're running a hotel in Dubai, Doha, Bahrain, or anywhere in that corridor, your business didn't slow down. It stopped. And the insurance implications alone... when a government explicitly names hotels as targets, every policy in the region is about to get repriced or cancelled.

But here's what I keep thinking about, and it's the part that connects to operators who aren't anywhere near the Persian Gulf. The security conversation in our industry has been about cybersecurity, active shooters, and maybe the occasional hurricane preparedness plan for the last decade. We haven't had to think about hotels as geopolitical targets since Mumbai in 2008. That attack changed security protocols globally for about 18 months, and then most properties quietly drifted back to baseline because the threat felt distant. This conflict is going to force that conversation open again... not just for international properties, but for any hotel in a market with symbolic value, government facilities, military presence, or high-profile international guests. Your security plan, whatever it says, was probably written for a world where hotels were soft targets of opportunity. We just entered a world where a state actor is publicly declaring them hard targets of intention. That's a fundamentally different risk profile, and most of our industry isn't remotely prepared for it.

The 10-day pause on US strikes against Iranian energy infrastructure buys a little time. Maybe talks go somewhere. Maybe they don't. But the precedent is set. A government said hotels are fair game and then acted on it. That bell doesn't un-ring. Every owner with international exposure, every management company with Middle Eastern or North African properties, and every brand with flags in sensitive markets needs to be having a very different conversation this week than they were having last month. And if you're stateside thinking this doesn't touch you... the State Department issued a worldwide caution for Americans abroad on March 22nd. Your international group business, your inbound tourism from markets that now have to route around a war zone, your insurance renewals... this touches you. You just might not feel it until next quarter.

I sat in a capital planning meeting about six years ago with an owner who had three hotels in a coastal market. Good hotels. Well-run. His insurance renewal came in 38% higher than the prior year. No claims. No disasters. Just the zip code. He looked at his broker and said, "What am I supposed to do, move the building?" Nobody laughed because nobody had an answer.

That guy was early to a problem that's now hitting everyone. The headline from CoStar says sustainability and climate resilience are now "core metrics" for the people on the outside looking in at your asset. Let me translate that into English: the people who write your insurance policies, approve your loans, and decide whether to buy your hotel are now grading you on how well your building handles what's coming. Not how well you recycle towels. How well your physical plant, your utility infrastructure, and your operating model hold up when energy costs spike 83% (which they did in the UK between 2019 and 2023), when insurance premiums jump 20-50% after a climate event in your region, and when your lender starts asking about your "Green Asset Ratio" because new regulations say they have to.

Here's what nobody's telling you about the money side of this. A recent AHLA survey... March 2026, so this is current... found that 50% of hotel owners cited utility and energy costs as a significant financial pressure, and 43% flagged insurance premiums. Those aren't separate problems. They're the same problem wearing different hats. Your building's energy efficiency (or lack of it) drives your utility cost AND your insurability. Hotels with environmental certifications like LEED or ISO 14001 are outperforming non-certified competitors on rate and occupancy. Not because guests are suddenly eco-warriors. Because those certifications correlate with newer systems, better infrastructure, and lower operating costs... which means better flow-through, which means better NOI, which means better valuations. Meanwhile, the industry is starting to whisper about "brown discounts" for properties that can't demonstrate a path to decarbonization. That's a real term. It means your asset is worth less because the next buyer's lender is going to charge more to finance it.

Look... I'm not an environmentalist. I'm an operator. I care about this because the P&L cares about this. The hotel sector contributes roughly 1% of global carbon emissions, and 75% of a hotel company's environmental impact comes from energy use. That's not a moral argument. That's a cost argument. LED retrofits, smart HVAC controls, low-flow fixtures... these aren't virtue signals. A 30% reduction in energy consumption is a 30% reduction in your second or third largest expense line. I've watched GMs ignore this stuff for years because the payback period seemed long or because "sustainability" sounded like something the corporate marketing team worried about. Those GMs are now getting calls from their asset managers asking why the property's insurance renewal looks like that.

The shift that matters isn't in the lobby. It's in the lender's office. European banks are now required to publish their Green Asset Ratio. That's coming here. When your lender has to disclose how "green" their loan portfolio is, they're going to start caring very much about your building's energy profile. Not because they love the planet. Because their regulators are grading them. And that grading flows downhill directly to your debt terms, your refinancing options, and ultimately your exit valuation. The U.S. averaged over 20 billion-dollar climate disasters annually in the last five years. Insurers aren't guessing anymore. They're repricing. If you haven't had your property assessed for climate resilience and energy efficiency in the last 18 months, you're negotiating blind with people who have better data than you do.