34 Victims for Hospitality and Tourism in 2025


Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


 Manufacturing|  Construction |  Transportation/Logistics |  Technology |  Healthcare |  Financial Services |  Public Sector |  Business Services |  Retail |  Consumer Services |  Energy |  Telecommunication |  Agriculture and Food Production |  Hospitality and Tourism


This page lists all the victims of ransomware attacks in Ransomware.live database for Hospitality and Tourism in 2025. We continously scrape ransomware group site to detect new victims.
Ransomware.live uses AI to identify the activity of victims, but please note that the results may not be 100% accurate—do not hesitate to contact us if you notice any errors.
AG flag

Curtain Bluff 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 17:34

www.curtainbluff.com Curtain Bluff files Vacationer information (personal data), audit information (including past years), bank activity (statements with all transactions), internal organization documentation (even the menu) and other documents.There are also large amounts of account data (about 500 unique login/password pairs). Price – $120,000

Victim:   |  Group: 
BR flag

Plaza Brasília Hotéis 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 15:18

The Brasília Palace Hotel was the first building inaugurated in B rasília when it opened its doors in 1958. It was the first large hotel in the city, with 13,000 square meters and the capacity to accommodate up to 350 people. We are ready to upload more than 250 GB of essential corporate do cuments such as: personal passports and other employee and custom er documents, contact numbers and e-mail addresses of employees a nd customers, financial data (audits, payment details, reports), corporate licenses, agreements and contracts, etc.

Group: 
FR flag

fr.sodexo.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-20 13:57

fr.sodexo.com

Victim:   |  Group: 
TR flag

rixos.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-14 08:08
Estimated Attack Date: 2025-03-12

Founded in 2000 and headquartered in Dubai, United Arab Emirates, Rixos Hotels is a Turkish luxury hotel chain. The company operates hotels and resorts across Europe and the Middle East, including properties in Azerbaijan, Egypt, Kazakhstan, Russia, Switzerland, Turkey, Ukraine and the UAE. - We will disclose 1.8 TB of data

Victim:   |  Group: 
SG flag

marinabaysands.com -  Singapore Hotel (Internal Server) 

Company logo
Ransomware Group:

Discovery Date: 2025-03-12 17:25

marinabaysands.com -  Singapore Hotel (Internal Server)

Victim:   |  Group: 
MX flag

havenresorts.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-11 22:52

Enjoy sanctuary of luxury and sophistication at Haven Riviera Cancun, an adults-only, all-inclusive resort located between Cancun & Riviera Maya.

Victim:   |  Group: 
US flag

Longue Vue Club 

Company logo
Ransomware Group:

Discovery Date: 2025-03-11 16:27

Longue Vue Club is one of the Pittsburgh area's oldest country clubs. Situated on a height of land several hundred feet above the Allegheny River, commanding views both up and down the river valley are offered from several points on the club's grounds. Members and guests enjoy golf, tennis, swimming, skeet and trap shooting, paddle tennis, cross-country skiing and formal and informal dining in a variety of settings in the historic landmark clubhouse.

Victim:   |  Group: 
CA flag

www.convention.qc.ca 

Company logo
Ransomware Group:

Discovery Date: 2025-03-06 16:37
Estimated Attack Date: 2025-03-05

[AI generated] Convention.qc.ca is the website for Quebec City Convention Centre, located in Quebec, Canada. This venue is one the largest convention centers in Canada, providing spaces for exhibitions, meetings, and events. It is known for its modern facilities, its environmental commitment, and for providing a wide range of services like event planning, catering, and technical support. It hosts up to 200 events annually, attracting thousands of attendees worldwide.

Victim:   |  Group: 
US flag

Naples Heritage Golf & Country Club 

Company logo
Ransomware Group:

Discovery Date: 2025-03-06 14:42

Naples Heritage is a casually elegant golf and country club community situated on 550 acres of land in Naples, Florida. With more than 250 acres of preserves, lakes and open space, NHGCC has the lowest density of any community of its type in Naples.

Victim:   |  Group: 
AU flag

Wendy Wu Tours 

Company logo
Ransomware Group:

Discovery Date: 2025-03-04 10:34

N/A

Victim:   |  Group: 
US flag

www.casinoessentials.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-28 20:36

[AI generated] Casino Essentials is a leading company offering learning and performance management solutions to the gaming industry. They provide e-learning courses about subjects like anti-money laundering, the Bank Secrecy Act, human trafficking prevention, as well as providing software that allows gaming establishments to track and report any suspicious activity. It also offers job-based tools for employee tracking. Their clients include commercial and tribal casinos, card clubs, and lotteries in North America.

Victim:   |  Group: 
IN flag

stayzapp.in 

Company logo
Ransomware Group:

Discovery Date: 2025-02-28 17:27

[AI generated] Stayzapp.in is an Indian-based online platform that empowers homeowners to monetize their spaces by renting them out to people looking for short or long-term stays. Aimed at providing affordable and comfortable accommodation options, it caters to varied needs such as holiday homes, guest houses and serviced apartments. Stayzapp.in operates with an easy-to-use interface that enables seamless booking for customers and hassle-free space listing for owners.

Victim:   |  Group: 
MX flag

LOSCABOSMEXICANFOODS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-02-27 16:38

[AI generated] LOSCABOSMEXICANFOODS.COM is a catering and food delivery service that offers a specialized menu full of traditional Mexican food options, including enchiladas, burritos, tacos, and more. They combine authentic recipes with fresh, high-quality ingredients to ensure a rich, satisfying culinary experience. The company caters for various events such as parties, birthdays, weddings, and even for corporate occasions.

Victim:   |  Group: 
US flag

Old NationalEvents Plaza 

Company logo
Ransomware Group:

Discovery Date: 2025-02-25 13:47

The impressive 280,000 square-foot, state-of-the-art fa cility, offers affordable, flexible space and in-house services to make the planning and coordinating of your event a breeze. You will find a lot of sensitive corporate documents su ch as: confidential licenses, agreements and contracts, financial data (audits, payment details, reports), con tact numbers and e-mail addresses of employees and cust omers, etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:78CC40182A586A88613293F A63B79084025497EE&dn=oldnationaleventsplaza.com&tr=udp: //tracker.openbittorrent.com:80/announce&tr=udp://track er.opentrackr.org:1337/announce

Group: 
US flag

Siegel Group 

Company logo
Ransomware Group:

Discovery Date: 2025-02-21 16:20

The Siegel Group, Inc. is a full service commercial real estate firm based in Las Vegas, Nevada and Studio City, California. It is a developer and operator of multi-family, extended stays, flexible stays, retail, hospitality, hotel-casinos, and land development. We present you more than 11TB of the company's data, here you will find the SQL databases, personal data of all employees and much more.

Victim:   |  Group: 
US flag

Haggin Oaks Golf (hagginoaks.com) 

Company logo
Ransomware Group:

Discovery Date: 2025-02-19 11:52

29,2 GB

Victim:   |  Group: 
 flag

saulttribe.com/kewadin.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-15 21:23

[AI generated] The Sault Tribe of Chippewa Indians owns the Kewadin Casinos. They operate five casinos in Michigan, USA, offering a wide range of gaming options including slot machines, table games, poker, bingo, keno, and more. They also provide amenities like hotels, an RV park, dining venues, and entertainment facilities, making them a complete destination for leisure and entertainment.

Victim:   |  Group: 
 flag

www.colacouronnelocations.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-15 16:29
Estimated Attack Date: 2025-02-12

[AI generated] Cola Couronne Locations is a rental company catered towards vacation needs. Based in Guadeloupe, it offers a wide range of fully furnished apartments, villas, and cars suitable for every budget. Known for its competitive prices and excellent customer service, this company aims to provide a stress-free, comfortable and satisfying vacation experience for its clients. With focus on convenience and comfort, Cola Couronne makes vacation planning easy and enjoyable.

Victim:   |  Group: 
US flag

thejdkgroup.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-12 14:35

[AI generated] The JDK Group is a full-service catering and events company based in Pennsylvania, USA. Offering a range of services like event planning, design, production, and catering, it specializes in corporate functions, weddings, social gatherings, and other large-scale events. With over 30 years of experience, the JDK Group is renowned for its commitment to quality, creativity, and high standards of customer service.

Victim:   |  Group: 
US flag

Baltimore Country Club 

Company logo
Ransomware Group:

Discovery Date: 2025-02-11 23:05
Estimated Attack Date: 2025-02-01

United States

Victim:   |  Group: 
CA flag

Grail Springs Retreat 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 16:03
Estimated Attack Date: 2025-02-03

Grail Springs Retreat - spa center with procedures from immunological therapy, energy work, work with the body, vibro -acoustics to the spiritual leadership. Grail Springs Retreat corporate office is located in 2004 Bay Lake Rd, Bancroft, Ontario, K0L 1C0, Canada and has 20 employees.

Victim:   |  Group: 
US flag

Old National Events Plaza 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 13:08

The impressive 280,000 square-foot, state-of-the-art facility, of fers affordable, flexible space and in-house services to make the planning and coordinating of your event a breeze. We are ready to upload a lot of sensitive corporate documents suc h as: confidential licenses, agreements and contracts, financial data (audits, payment details, reports), contact numbers and e-ma il addresses of employees and customers, etc.

Group: 
US flag

www.fudpucker.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-09 19:01

http://[redacted].onion/leaks/97be2c2200a124696f41a81f1fef9838...

Victim:   |  Group: 
US flag

Rivers Casino and Rush Street Gaming 

Company logo
Ransomware Group:

Discovery Date: 2025-02-04 01:47
Estimated Attack Date: 2023-08-12

Status: 11d 21h 12m 26s - Size Data: 2.561 TB

Victim:   |  Group: 
US flag

Daniel Island Club 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 21:06
Estimated Attack Date: 2025-01-24

United States

Victim:   |  Group: 
MO flag

Ponte16 Hotel & Casino 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 12:50

N/A

Victim:   |  Group: 
US flag

Altair Travel 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 12:12

From a four person basement office to our office today, Altair is supported by highly experienced professionals who have "been there" and "done that". We love what we do and do what we love, which is why clients keep coming back for the "Alta ...

Victim:   |  Group: 
SE flag

idrefjall.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:15

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
GB flag

treehotel.co.uk 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 11:35

[AI generated] Treehotel.co.uk is a unique accommodation provider based in Sweden. They offer lodging within custom-built tree houses that blend harmoniously with the surrounding forest. Guests get to experience a serene and secluded stay, combined with stylish interiors and modern amenities. Some of its tree houses include a UFO-themed room and a mirrored cube, offering panoramic views of nature. Activities such as hiking, kayaking, fishing are also available.

Victim:   |  Group: 
BR flag

www.agenciahost.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-27 07:18

www.agenciahost.com

www.agenciahost.com has been previously claimed by Ransomhub for an attack estimated on 2024-04-03.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim:   |  Group: 
AU flag

brunetti.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-21 23:10
Estimated Attack Date: 2025-01-14

[AI generated] Brunetti is a renowned Italian cafe established in Melbourne, Australia in 1985. Known for its European ambiance and authentic Italian food, Brunetti offers a wide range of options including gourmet pizza, pasta, gelato and one of Melbourne's most extensive ranges of Italian pastries, cakes and desserts. They also provide catering and online takeaway ordering services.

Victim:   |  Group: 
US flag

Huntington Hotel Group 

Company logo
Ransomware Group:

Discovery Date: 2025-01-09 12:29

Huntington Hotel Group was founded in 1998 by Kevin Keefer and Brent Andrus with the vision of developing and managing premium brand select service hotels in markets with high barriers to entry.

Victim:   |  Group: 
BE flag

Omnitravel 

Company logo
Ransomware Group:

Discovery Date: 2025-01-07 09:25

Omnitravel is a travel company that has been operating in Belgium for over 25 years, offering a variety of travel services, including vacations, business trips and group tours. They offer an individual approach to each client, keeping in touch before, during and after the trip. https://omnitravel.be/over-ons/

Victim:   |  Group: 
FR flag

groupegm.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-02 10:53
Estimated Attack Date: 2024-12-31

[AI generated] Groupe GM is a leading company specializing in the creation and distribution of high-quality hotel amenities. Established in France, it partners with renowned brands to offer a diverse range of products, including toiletries and accessories, tailored to the hospitality industry. With a strong emphasis on innovation and sustainability, Groupe GM serves clients worldwide, enhancing guest experiences.

Victim:   |  Group: