Omni Hotels & Resorts has fallen victim to a cyberattack orchestrated by the notorious Daixin Team ransomware gang. The assailants are now threatening to expose sensitive customer data unless a ransom is paid promptly.
The attack comes on the heels of a widespread system outage that crippled Omni's IT infrastructure, disrupting crucial services such as reservations and hotel room access. The hotel chain confirmed the cyberattack as the cause behind the outage, prompting an immediate shutdown of systems to mitigate further damage.
The Daixin Team wasted no time in claiming responsibility for the breach, adding Omni Hotels to their dark web leak site. This move puts the hotel chain's customers at risk of having their personal information exposed if the ransom demands are not met.
Omni Hotels responded swiftly to the cyberattack, enlisting the help of cybersecurity experts to investigate the extent of the breach. While most systems have been restored, the investigation is ongoing as the company works to bolster its defenses against future threats.
Daixin Team's modus operandi involves not only encrypting systems but also stealing sensitive data for double extortion purposes. By threatening to release stolen information online, they aim to coerce victims into paying hefty ransoms to protect their reputation and safeguard customer privacy.
Authorities had previously warned about the Daixin Team's penchant for targeting critical sectors, including healthcare and public health. Their tactics often involve exploiting vulnerabilities in VPN servers or leveraging compromised credentials to gain unauthorized access to networks.
This isn't the first time Omni Hotels has faced cybersecurity challenges. In 2016, the company disclosed a data breach stemming from malware infecting point-of-sale systems at dozens of its locations. Payment card information was compromised, highlighting the ongoing threat posed by cybercriminals.
With over 50 hotels and resorts spanning multiple countries, Omni Hotels must prioritize the security of customer data. As cyber threats continue to evolve, implementing robust cybersecurity measures and staying vigilant against potential attacks are paramount to safeguarding sensitive information.
As businesses across industries grapple with the increasing frequency and sophistication of cyberattacks, collaboration between organizations and law enforcement agencies is crucial. By sharing threat intelligence and adopting proactive security measures, companies can better defend against cyber threats and protect customer trust.
Souce: Bleeping Computer