Skip to content
Leak-site post naming GuestTek, captured by ThreatCluster

GuestTek

tridentlocker

Ransomware leak-site victim intelligence

Data size
126.98 GB
Files
48,521
Posted
Nov 29, 2025
Country
CA
Industry
Technology

Summary

Written by ThreatClusterfrom file listing, leak post, screenshot

The group tridentlocker claims GuestTek was compromised, publishing a leak on their own site they say totals 126.98 GB across 48,521 files. Sample filenames published include Financial_Audit.7z, FTPData.7z, Hilton Connected Room Automation.7z, and private.7z, with the data described as 7z archives (x4). The leak post was published on 2025-11-20.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

[AI generated] GuestTek is a global company that specializes in delivering and managing communications and connectivity services for the hospitality industry. They provide solutions for internet access, entertainment, and fully integrated hospitality systems, enhancing guest experience in properties around the world. The company is a pioneer and leader in providing advanced technologies for the hotel industry such as IP-PBX, Voice, IPTV, and High-Speed Internet Access.

File types seen
7z × 4
Sample files (4)
Financial_Audit.7z
FTPData.7z
Hilton Connected Room Automation.7z
private.7z

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture