ShadowByt3$ Claims Breach of Hotelogix and Demands $500,000
Summary
ShadowByt3$ claims it breached Hotelogix through misconfigured Amazon S3 buckets and Azure blobs, scraping data and demanding $500,000 in BTC or Monero to prevent a leak. The claims are unconfirmed.
Key points
- ShadowByt3$ claims it accessed Hotelogix data through misconfigured Amazon S3 buckets and Azure blob storage.
- The group claims it scraped about 6 GB of data and demands $500,000 in BTC or Monero to prevent publication.
- The alleged data includes Hotelogix materials and client-related records attributed to Treebo Hotels.
- Potentially exposed customer information is claimed to include names, contact details, stay records, and payment-related details.
- The post says the claims come from the ransomware group and states that their accuracy could not be confirmed.
Article Details
- Victim
- Hotelogix
- Encryption Status
- Not reported; the source describes a claimed breach and data scraping, but does not report encryption.
- Exfiltration Status
- Claimed by ShadowByt3$; unverified by the source.
- Exfiltrated Data
- The group claimed to have scraped internal corporate materials and client-related data allegedly taken from Treebo Hotels, including guest folios, stay details, and payment-processing information.
- Exfiltrated Size
- About 6 GB, according to the group’s claim.
- Ransom Demand
- $500,000 in BTC or Monero, according to the group; the stated April 14 deadline has no year specified.
- Leak Status
- The group threatened to leak the data if payment was not made; publication is not confirmed.
Threat Actors
Products
Amazon S3ShadowByt3$) claimed responsibility for breaching Hotelogix in Singapore by exploiting misconfigured Amazon S3 buckets and Azure blob storage that allowed scraping of internal and client-specific data.Microsoft Azure Blob Storagefor breaching Hotelogix in Singapore by exploiting misconfigured Amazon S3 buckets and Azure blob storage that allowed scraping of internal and client-specific data.