Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

IHG Hotels & Resorts (Estate)

ihg.com

IHG Hotels & Resorts (Estate) was listed on the Byod and LockBit 2.0 leak site on Jul 11, 2025. Brandefense has recorded 2 separate claims against it. Information as of Nov 4, 2026.

Updated continuously · figures as of Nov 4, 2026
Claimed by
Byod, LockBit 2.0
First listed
Jul 11, 2025
Claims recorded
2

2 Leak-Site Claims.

ByodConfirmed claim
Posted on the leak site
Nov 4, 2026
Collected by Brandefense
Nov 4, 2026
Data claimed
Not stated
Leak-site post text, written by the group
[PSA] Nice LDAP Binding Password being '123'. Rotating things won't really save you cause it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All…
LockBit 2.0Confirmed claim
Posted on the leak site
Date not shown
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Michigan State University
msu.edu
ByodUSUnited StatesEducation and ResearchNot stated
University of New Mexico
unm.edu
ByodUSUnited StatesEducation and ResearchNot stated
Decorolala
decorolala.com
ByodCACanadaRetailNot stated
Gate | Crypto Exchange
gate.com
ByodKYCayman IslandsFinancial ServicesNot stated
TMobile
t-mobile.com
ByodUSUnited StatesTechnologyNot stated
Standpointe / Trinite Solutions
standpointe.com
ByodCACanadaConsultingNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Belmont Resorts
belmontresorts.com
The GentlemenTTTrinidad and TobagoHospitality and TourismNot stated
mahsing.com.my
mahsing.com.my
ScarlettgroupMYMalaysiaHospitality and TourismNot stated
Castle Howard Estate
castlehoward.co.uk
QilinGBUnited KingdomHospitality and TourismNot stated
lidoway.com
lidoway.com
LockBit 5.0UnknownHospitality and TourismNot stated
Prism Medical Products
prism-medical.com
WallstreetUSUnited StatesHospitality and TourismNot stated
United Restaurant Supply
coloradokitchens.com
QilinUSUnited StatesHospitality and TourismNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Nov 4, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.