Back to Victim Disclosures

IHG Hotels & Resorts (Estate)

byodransomware group
Published
3h ago

Added Nov 4, 2026

[PSA] Nice LDAP Binding Password being '123'. Rotating things won't really save you cause it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All Financial Records. This affects the big names such as Six Senses, Holiday Inn, Holiday Inn Express, Staybridge Suites, Garner, Candlewood, Crowne Plaza, Mayfair Hotel, etc etc you can pick up what we are putting down at this point. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. | Updated on 2026-11-03

Leak Page Screenshot

Organization Details

Organization

IHG Hotels & Resorts (Estate)

Leak Data

Published

Nov 4, 2026

Publication Status

Published

Discovered

Nov 4, 2026

Leak URL
http://byodxn5s7sua6oyyjj74rycgn6afncfckprt5ezskt3cni6lg3wdrgad.onion/
Site OnlineLast scanned 4m ago