A 57-year-old woman is dead because the best escape plan available to her was tying bedsheets together and climbing out a fourth-floor window. Her husband watched it happen. The hotel was a Hyatt Regency. The city was Kathmandu. The date was September 9, 2025, during Nepal's anti-corruption protests that killed over 50 people and eventually toppled a prime minister. A mob of 100 to 150 people breached the property, set fires, looted guest belongings, and burned what they didn't take. The hotel told guests to move to higher floors. That advice trapped them.

Let that sit for a second. "Shelter in place, move to higher floors." That's the standard fire response in most hotel SOPs. It makes sense when the fire is accidental and the fire department is coming. It makes zero sense when the fire is intentional and the people setting it are still in the building. The husband just had his $12 million compensation claim dismissed by a Delhi court on procedural grounds... he sued Hyatt's Indian consulting arm trying to establish jurisdiction for something that happened in Nepal. The legal theory was shaky. The court kicked it. He can still file a civil suit. But here's what matters to you and me: the legal outcome is almost irrelevant compared to the operational question this case puts on every GM's desk. What is your plan when the threat isn't a kitchen fire or a gas leak... but people?

I've been through hurricanes, bomb threats, power failures that lasted days, and one situation I'd rather not describe in detail involving an armed individual in a lobby at 3 AM. Every one of those had a playbook. Every one of those playbooks assumed a functioning civil infrastructure... police respond, fire department arrives, the cavalry comes. Kathmandu in September 2025 had none of that. The cavalry wasn't coming. The police were overwhelmed. And the hotel's SOP, designed for orderly emergencies, became a death trap in a disorderly one.

If you're operating internationally... especially in regions with political instability, protest movements, or weak rule of law... you need a separate protocol for civil unrest. Not a paragraph in your emergency manual. A separate protocol. It needs to address evacuation routes when ground-floor exits are compromised. It needs to address communication when cell networks go down (they did in Kathmandu). It needs to address the possibility that "shelter in place" is the wrong call. And it needs to be something your night auditor, working alone at 2 AM, can execute without calling a regional VP who's asleep in a different time zone. The Hyatt Regency Kathmandu is still closed for reconstruction. Nepal's luxury hotel sector reported significant financial losses through the autumn tourist season. One family lost a wife and mother. All because the playbook assumed the world would behave the way it's supposed to.

This isn't just an international problem, by the way. Domestic hotels have faced protest-related incidents, civil disturbances during political events, and situations where local law enforcement was unavailable or delayed. If your emergency plan assumes help is always 10 minutes away... you're making the same bet that hotel in Kathmandu made. And sometimes the bet doesn't pay.