Ransomware Attack Disrupts Hotel Ózon Systems and May Affect Guest Data
Summary
Hotel Ózon said attackers encrypted its systems and backups, demanded €25,000, and potentially accessed booking data for guests recorded between November 2022 and July 2026. The hotel did not pay.
Key points
- The hotel said it detected unauthorized access on August 1 at 00:10; attackers encrypted files on its servers and backups.
- The incident disrupted front-office operations, accounting, email, and access to databases for 36 hours.
- Booking records from November 1, 2022, through July 31, 2026, may have been affected, including contact, identity-document, vehicle, and stay details.
- The hotel said it had to notify about 40,000 guests while unable to access its databases.
- Attackers demanded €25,000 for a decryption key; the hotel’s director said the ransom was not paid.
- The director said consulted specialists estimated that only about one in three or four paying victims actually recover their data.
Article Details
- Victim Organization
- Hotel Ózon
- Incident Type
- Ransomware attack; attackers encrypted hotel data and backups.
- Data Types Exposed
- Names
- Email addresses
- Phone numbers
- Residential addresses
- Places and dates of birth
- Identity-card numbers
- Vehicle registration numbers
- Stay dates
- Nationality
- Affected Records
- Approximately 40,000 guests were to be notified; the article does not confirm how many records were accessed or exposed.
- Operational Impact
- The hotel reported a 36-hour crisis. Its databases were inaccessible, and the front-office system, accounting, and email were disrupted.
- Ransom Or Extortion
- Attackers reportedly demanded €25,000 for the decryption key. The hotel said it did not pay.
- Claim Status
- confirmed