Worldleaks Claims Sheraton Hotel Compromised in Ransomware Incident

Summary
Ransomware.live reports that Worldleaks claims to have compromised Sheraton Hotel in the US and threatens to exfiltrate and publicly release sensitive information unless a ransom is paid. The claim is unconfirmed.
Key points
- The record identifies Sheraton Hotel in the US as the victim and Worldleaks as the actor.
- A Worldleaks leak-site listing is cited as the claim's source; ransomware.live identifies itself as the monitoring service.
- Worldleaks threatens to exfiltrate and publicly release sensitive information unless a ransom is paid.
- The post says it is based on the group's public claims and that their accuracy could not be confirmed.
Article Details
- Victim
- Sheraton Hotel
- Victim Domain
- Not disclosed
- Attack Date
- 2026-03-27
- Claim Date
- 2026-03-27
- Encryption Status
- Not disclosed
- Encrypted Size
- Not disclosed
- Exfiltration Status
- Not confirmed; the post threatens data exfiltration.
- Exfiltrated Data
- The post threatens public release of sensitive information; actual exfiltration is not confirmed.
- Exfiltrated Size
- Not disclosed
- Ransom Demand
- Not disclosed
- Leak Status
- Public release was threatened; no release is confirmed.
