PULSE
FEED
ransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Other
Ransomware · Claim4 noviembre 2026 · 01:26 UTC
CLAIMreclamada porBYOD

IHG Hotels & Resorts (Estate)

PaísGBUnited Kingdom
SectorHospitality
Datos claveREGISTRO
Monto de rescateNo revelado
Tamaño de datos exfiltradosNo revelado
Screenshot del leakNo
Prensa mencionada por el grupoNo
Fecha del ataque3 noviembre 2026 · 00:00 UTC
Descripción

Nice LDAP Binding Password being '123'. Rotating things won't really save you casue it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All Financial Records. This affects the big names such as Six Senses, Holiday Inn, Holiday Inn Express, Staybridge Suites, Garner, Candlewood, Crowne Plaza, Mayfair Hotel, etc etc you can pick up what we are putting down at this point. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.

Otras víctimas del grupo · ±48h1
HaceVíctimaPaísSectorTamañoCap.
2d
Michigan State University
USEducation—○United States