Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

#13 of 28 industriesWatch Hospitality and Tourism

Hospitality and Tourism: Who Is Hitting It.

As of Oct 19, 2026, 462 Hospitality and Tourism organisations have been listed as ransomware victims on leak sites, 1.4% of all confirmed victims (about 1 in 71). The most active group in this sector is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
462
Share of all victims
1.4%
Rank
#13 of 28 sectors
Most active group
Qilin
Most hit country
United States

Victims Posted Per Month.

Confirmed ransomware victims in Hospitality and Tourism per month
MonthConfirmed victims
November 20250
December 20254
January 202616
February 202625
March 202621
April 202619
May 202621
June 202617
July 202624
August 202622
September 202613
October 2026 (month in progress)16

Most Active Groups Here

  1. Qilin378.0% of all victims
  2. LockBit 3.0286.1% of all victims
  3. Clop275.8% of all victims
  4. Play214.5% of all victims
  5. Akira194.1% of all victims

Most Hit Countries In This Industry

  1. USUnited States13829.9%
  2. GBUnited Kingdom4810.4%
  3. FRFrance235.0%
  4. ITItaly214.5%
  5. ESSpain204.3%

Latest Victims.

All 462 Hospitality and Tourism victims →
Latest confirmed ransomware leak-site victims in Hospitality and Tourism
VictimClaimed byCountryIndustryData claimedPosted
Personify Health
personifyhealth.com
HelixUSUnited StatesHospitality and TourismNot stated
camden-living
camdenliving.com
Iah6477USUnited StatesHospitality and Tourism1.2 TB
Museum Siam
museumsiam.org
The GentlemenTHThailandHospitality and TourismNot stated
kordhotels.gr
kordhotels.gr
LockBit 5.0GRGreeceHospitality and TourismNot stated
The Park Lane Hong Kong
parklane.com.hk
OrovaHKHong KongHospitality and TourismNot stated
Korea Ferry (ferry operations)
koreaferry.kr
N0nKRSouth KoreaHospitality and TourismNot stated
Camellia Line (ferry and RoRo operations)
camellia-line.co.jp
N0nJPJapanHospitality and TourismNot stated
Grand Ion Delemen Hotel
iondelemen.com.my
MajinahanashiMYMalaysiaHospitality and TourismNot stated

Sector Briefings For Hospitality and Tourism, Every Week.

The Brandefense platform sends a weekly ransomware brief for your sector and region: new groups, new victims among your peers and suppliers.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.