« All threats

Ransomware in the Hospitality & tourism sector

In the last 12 months, 127 organisations in Hospitality & tourism have been claimed by ransomware groups, 24 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.

Victims, last 12 months127
Last 30 days24
Confirmed by press0

Explore with filters →🔔 Get alerts for Hospitality & tourism

Victims per month

  1. Nov 250
  2. Dec 250
  3. Jan 260
  4. Feb 260
  5. Mar 260
  6. Apr 266
  7. May 2616
  8. Jun 2624
  9. Jul 2626
  10. Aug 2631
  11. Sep 2624
  12. Oct 260

Most active groups (12 months)

  1. Qilin24
  2. The Gentlemen15
  3. Dragonforce12
  4. Akira8
  5. Lockbit56
  6. Nightspire4
  7. Majinahanashi4
  8. Safepay3
  9. Krybit3
  10. Pear3

Most affected countries

  1. United States25
  2. Spain4
  3. United Arab Emirates3
  4. Egypt3
  5. Malaysia3
  6. Thailand3
  7. Germany3
  8. United Kingdom2
  9. Australia2
  10. Hong Kong SAR China2

Recent victims

OrganisationGroupCountryClaimedStatus
SolariaThe GentlemenIndonesia9/29/2026◌ Claimed (unverified)
Holiday Inn VilniusSafepayLithuania9/28/2026◌ Claimed (unverified)
Ponte 16Killsec3Macao SAR China9/27/2026◌ Claimed (unverified)
BlockBets CasinoKillsec3Germany9/27/2026◌ Claimed (unverified)
HITAkiraSlovenia9/23/2026◌ Claimed (unverified)
The Fifty/50Qilin—9/22/2026◌ Claimed (unverified)
PajulahtiThe GentlemenFinland9/21/2026◌ Claimed (unverified)
Touring Club SuisseQilinSwitzerland9/20/2026◌ Claimed (unverified)
Inglewood GolfPlay—9/18/2026◌ Claimed (unverified)
Roan Camping HolidaysINC RansomUnited Kingdom9/18/2026◌ Claimed (unverified)
The Gran Hotel InglésQilinSpain9/17/2026◌ Claimed (unverified)
GeiegQilin—9/15/2026◌ Claimed (unverified)
Dang Invest GroupThe GentlemenCzechia9/14/2026◌ Claimed (unverified)
GelartiThe GentlemenPeru9/14/2026◌ Claimed (unverified)
Atlas Ocean VoyagesBooba TeamUnited States9/14/2026◌ Claimed (unverified)
Tiflis PalaceKrybitGeorgia9/12/2026◌ Claimed (unverified)
La Sultana Hotel GroupKrybitMorocco9/12/2026◌ Claimed (unverified)
Arkın GroupBlack NevasCyprus9/9/2026◌ Claimed (unverified)
Brentwood Country ClubAkiraUnited States9/8/2026◌ Claimed (unverified)
Abaco ViaggiThe GentlemenItaly9/7/2026◌ Claimed (unverified)
McDonald's EcuadorVexyEcuador9/6/2026◌ Claimed (unverified)
The Big TableQilin—9/5/2026◌ Claimed (unverified)
McDonald's EcuadorVexyEcuador9/3/2026◌ Claimed (unverified)
Royal Plaza On ScottsEclipseSingapore9/2/2026◌ Claimed (unverified)
South Pacific Hotel LimitedOrova—8/30/2026◌ Claimed (unverified)
Berghotel OberhofZawooGermany8/29/2026◌ Claimed (unverified)
Kling AutomatenQilin—8/27/2026◌ Claimed (unverified)
Party Rental Ltd.The GentlemenUnited States8/26/2026◌ Claimed (unverified)
Park de RochieChaos—8/25/2026◌ Claimed (unverified)
Furnished QuartersDark Project—8/24/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.