Kordhotels.gr listed on LockBit ransomware leak site

• Ransomware group: Lockbit5
• Country: Greece
• Sector: Hospitality
• Announcement date: October 14, 2026

The Greece-based hospitality group kordhotels.gr has been listed on the leak site of the LockBit ransomware group. This announcement, published on October 14, 2026, represents a claim by the threat actor regarding a successful cyberattack against the organization.

The claimed attack event

The LockBit group has listed kordhotels.gr on its dedicated leak site, alleging that a data breach has occurred. According to the announcement, the group claims to have obtained the organization's data. This type of listing is a common tactic used by ransomware groups to exert pressure on their targets.

Ransomware leak sites serve as public platforms where threat actors post information about victims to increase the visibility of their extortion attempts. In many cases, these groups utilize double extortion tactics, where they not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. By listing a company, the attackers aim to create reputational damage and force the victim into paying a ransom to prevent the disclosure of stolen information.

Data involved in the claim

Regarding the specifics of the incident, no details regarding the nature of the leaked or threatened data have been provided. Furthermore, the screenshot associated with the claim is not suitable for verifying the content of the alleged breach. Consequently, the listing names no specific data types.

About Kord Hotels

Kord Hotels is a hotel group operating in Santorini since 1972. The organization manages various accommodation facilities across the island, providing a range of lodging options for travelers.

Analysis and potential implications

LockBit is a ransomware group known to have been active since 2019. Reports indicate that the group has returned with a new version following infrastructure disruptions that occurred in February 2024. The potential leakage of the organization's data may lead to the exposure of guest personal information and trigger legal proceedings under GDPR.

The theft of such data could create secondary risks for guests, including identity theft and targeted phishing attacks. When personal information is compromised, individuals often face increased vulnerability to fraudulent activities where attackers impersonate legitimate entities to steal further credentials or financial information.

For the organization, the impact may include negative effects on operational continuity. To mitigate such risks, organizations in the hospitality sector often implement defensive measures such as robust encryption, multi-factor authentication, and regular security audits. Maintaining a strong incident response plan is also a critical component of modern cybersecurity posture to manage the fallout of potential data exposures.