ALPHV/Blackcat, the notorious hacker group known for their extortion attacks on Caesars Entertainment and MGM Resorts, has announced a new victim – the American network of LBA Hospital. LBA Hospitality has over 100 hotels in its portfolio, including world-renowned brands such as Marriott, Hilton, Holiday Inn, and Best Western. These hotels are mainly located in the southeastern United States.
In a recent development, ALPHV/Blackcat has published information about LBA Hospitality on a leakage website, claiming to have stolen a small portion of files from the Alabama-based company. The hacker group asserts that they were able to obtain approximately 200 GB of “strictly confidential” data from LBA’s main servers. This data includes sensitive information about customers and employees such as resumes, driver’s licenses, identity certificates, social security numbers (SSN), financial reports, credit card information, and much more.
ALPHV/Blackcat has given LBA Hospitality a three-day ultimatum to contact them and rectify the alleged mistake made by the company’s IT department. Failure to comply will result in the publication of the stolen data. LBA Hospitality has not yet issued a statement regarding this situation.
In addition to hotel management, LBA Hospitality also provides various services including personnel management, finance, sales, and marketing. At least 15 mid-class hotel networks are amongst their current customer base. Ironically, this is the fourth instance of data leakage for Marriott in the last five years.
While the identity of the attackers targeting MGM Resorts and Caesars Entertainment remains unclear, it is confirmed that two hacker groups are involved in these breaches: ALPHV/Blackcat and Scatted Spider (Unc3944).
A member of the Scatted Spider claimed responsibility for the attack on MGM, but denied any involvement in the hacking of Caesars. ALPHV/Blackcat, on the other hand, later acknowledged their role in the MGM attack through a statement on their leakage website.
The representative of Scatted Spider stated that their group is actually a subgroup of ALPHV. However, the reliability of this information is uncertain as ALPHV did not mention any subsidiaries in their statement.