Summary
Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot, our reportingThe leak post from the Qilin group claims The Gran Hotel Ingles was a ransomware victim, but it does not specify what data were taken or how much. The leak lists the victim’s legal name, domain granhotelingles.com, and the hospitality sector. Publication status on the leak site is listed and the page includes a TOX hash value. ThreatCluster’s news reporting notes that Qilin published new victims in mid-September 2026.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- http://www.granhotelingles.com
What was taken
The Gran Hotel Ingles
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- TOX
- 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
- tox_hash
- TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
- WikileaksV2
- https://wikileaks2.com/
- wikileaks_source
- WikileaksV2 (https://wikileaks2.com/)
- WikileaksV2 (https://wikileaks2.com/)
- present
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.