Sheraton Miramar Resort El Gouna listed by the Nightspire ransomware group

Overview

The Nightspire ransomware group has listed the Sheraton Miramar Resort El Gouna, a beachfront hotel in Egypt, on its leak site. The listing appeared on 2 June 2026.

What was published

The group has listed the hotel as a victim but has not yet published data details. Hospitality operations typically hold guest profiles, reservation records and internal administrative documents, which are the likely contents of any exfiltration.

Risks for affected individuals

• Guest personal data may be exposed.
• Reservation and payment records could enable fraud.
• Employees' records may be included.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

Recent guests should monitor payment activity and be cautious of unsolicited messages referencing the hotel. The property should notify guests and staff, review compromised systems, and coordinate with the brand's security teams.