CVK Hotels & Resorts listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: Türkiye
• Sector: Hospitality
• Announcement date: December 17, 2025

Inc Ransom claims to have compromised CVK Hotels & Resorts

The ransomware group known as Inc Ransom has published a post on its dedicated leak site, claiming to have compromised data belonging to CVK Hotels & Resorts. This announcement, made on December 17, 2025, marks a new development in the ongoing threat landscape facing the hospitality sector.

Details of the alleged attack

According to the claim made by the threat actor, the organization was listed on the group's leak site on December 17, 2025. The group alleges that the organization's management remained indifferent after being notified of the breach. This claim of indifference is a common tactic used by ransomware groups to pressure organizations into meeting their demands.

Ransomware groups often utilize leak sites to host information about their victims. These sites serve as a public platform for the attackers to exert pressure through psychological and reputational damage. When a group claims that a victim is unresponsive, it is often part of a broader strategy to escalate the situation and increase the likelihood of a ransom payment.

Data involved in the claim

Regarding the specific content of the alleged breach, the group has not provided any specific details regarding the nature or content of the alleged leaked data. The information provided in the announcement is limited, as the screenshot associated with the post contains only a general description of the organization's operations and services.

• No specific data types were listed in the announcement.

In many ransomware incidents, attackers employ a tactic known as double extortion. This method involves not only encrypting an organization's systems to disrupt operations but also stealing sensitive data. The threat of leaking this data on a public site is used as secondary leverage to ensure the victim complies with ransom demands. While the specific contents of the data in this instance remain unknown, the potential for such leaks poses significant risks.

About CVK Hotels & Resorts

CVK Hotels & Resorts is a luxury hotel chain offering accommodations in the heart of Istanbul. With properties such as the CVK Park Bosphorus Hotel and CVK Taksim Hotel, the company provides services including lodging, spa, fitness facilities, and event spaces for both leisure and business travelers.

Potential impact and industry implications

This claim may pose a significant risk to the security of the organization's customer data. If data has been compromised, it could trigger legal processes under the KVKK, which governs the protection of personal data in the hospitality sector. The potential exposure of customer identification or payment details could lead to secondary risks such as identity theft or targeted phishing attacks.

Given the double-extortion tactics typically employed by the Inc Ransom group, the publication of such data may negatively impact the organization's reputation. For organizations operating in the hospitality sector, maintaining the confidentiality of guest information is paramount to maintaining trust and complying with regional data protection regulations.

In response to such threats, it may be necessary for the organization to review its security measures and inform its customers regarding potential data breaches. General defensive steps for organizations facing these threats include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees to prevent initial access through phishing.