Hospitality & Tourism — Cyber Threat Activity
Threat actors, incidents and malware targeting the Hospitality & Tourism sector — 369 recorded incidents and 75 tracked groups.
- Recorded incidents: 369
- Incidents, trailing 180 days: 126
- Tracked threat actors: 75
- Malware families: 74
Recent incidents
- Club One Casino 2026-08-06
- EduSpa 2026-08-06
- Stade Francais 2026-08-05
- The Metropolitan Entertainment & Convention Authority 2026-08-05
- Emirates Flight Catering 2026-08-05
- SURE TRAVEL COMPANY 2026-08-04
- Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach 2026-08-04
- TUI China 2026-08-03
- Angel Hotel 2026-07-30
- Weilhotel 2026-07-29
- Northwood Country Club 2026-07-29
- HOP 2026-07-27
- Katathani Phuket Beach Resort 2026-07-27
- Furama Bukit Bintang 2026-07-27
- Eagle Crest Communities 2026-07-26
- La Sevillanita 2026-07-26
- Plitvička Jezera Nacionalni Park 2026-07-25
- Sunway Berhad 2026-07-23
- Record Go Alquiler 2026-07-23
- Tèrra Aventura 2026-07-21
Threat actors targeting Hospitality & Tourism
- Qilin 47 incidents
- Akira 38 incidents
- Play Ransomware 29 incidents
- LockBit 25 incidents
- RansomHub 24 incidents
- DragonForce 23 incidents
- INC Ransom 16 incidents
- Medusa Ransomware 13 incidents
- Lynx Ransomware 12 incidents
- NightSpire 12 incidents
- Stormous 12 incidents
- SafePay 10 incidents
- Hunters International 6 incidents
- KillSec 6 incidents
- ShinyHunters 6 incidents
- The Gentlemen 6 incidents
- 8Base 5 incidents
- Payload 5 incidents
- Cl0p 4 incidents
- Meow 4 incidents
- Deadlock 3 incidents
- APT73 3 incidents
- Black Basta 3 incidents
- BlackSuit 3 incidents
Where these victims are
- United States 130
- Spain 20
- United Kingdom 20
- Canada 14
- France 14
- Australia 12
- Germany 11
- Italy 9
- Sweden 6
- India 5
- Mexico 5
- Singapore 5
Malware used against Hospitality & Tourism
Families used by the threat actors that target this sector, derived from actor tooling rather than observed in these incidents directly.
- BlackCat Malware
- Cobalt Strike Malware
- Impacket Tool
- Mimikatz Tool
- PsExec Tool
- REvil Malware
- Ryuk Malware
- AdFind Tool
- Empire Tool
- LaZagne Tool
- Maze Malware
- ngrok Tool
Coverage. 76.7% of incidents in our log carry a sector classification; the remainder name a victim we have not placed in an industry. Counts here are a floor, not a total, and are not comparable between sectors of different sizes.