Sharm Reef Hotel listed by the Space Bears ransomware group

Overview

The Space Bears ransomware group has listed Sharm Reef Hotel, a hotel in Sharm El Sheikh, Egypt, on its leak site. The listing appeared on 14 January 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group's post describes the exposed material as including:

• Client data (personal data)
• Staff personal data, including salary and position data
• Financial reports
• Other valuable and confidential documents

Risks for affected individuals

• Guests' personal data may be exposed.
• Staff salary data is sensitive.
• Financial reports could be misused.

What remains unknown

• The volume of data involved.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Guests should monitor their accounts and be cautious of unsolicited communications. The hotel should notify affected guests and staff, review its systems, and report the incident to Egyptian authorities.