Breaches and incidents
SEETELHOTELS (Usedom): ransomware attack, extortion attempt and leak threat
The hotel group said its IT detected unauthorized access to internal systems on Saturday 10 Oct 2026 (the later FAQ says 11 Oct) in a ransomware attack...
- Disclosed
- Verification
- Checked against a primary source
What happened
- The hotel group said its IT detected unauthorized access to internal systems on Saturday 10 Oct 2026 (the later FAQ says 11 Oct) in a ransomware attack that encrypted parts of systems and data; customer and booking data, internal admin data and business partner documents may be affected, including internal booking notes that can contain credit card numbers, which it says are almost exclusively virtual cards.
- Root cause: not disclosed.
- No attacker named; a 20 Oct update says there is now an extortion attempt and the attackers threaten to publish data.
- Systems were isolated, a BSI-recommended IR firm engaged, the Mecklenburg-Vorpommern data protection authority notified and a complaint filed with the LKA; systems are being rebuilt and the group says it will not contact the attackers.