Rhactus Hotel listed by the LockBit ransomware group

Overview

The LockBit ransomware group has listed Rhactus Hotel, an accommodation provider in El Alamein, Egypt, on its leak site. The listing appeared on 22 April 2026.

What was published

The group claims to have exfiltrated data from the hotel. Hospitality operations typically hold guest profiles, reservation records and internal administrative documents, which are the likely contents of any exfiltration.

Risks for affected individuals

• Guest personal data may be exposed.
• Reservation and payment records could enable fraud.
• Employees' records may be included.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

Recent guests should monitor payment activity and be cautious of unsolicited messages referencing the hotel. The property should notify guests and staff, review compromised systems, and communicate the scope of the incident.