Skip to content
Leak-site post naming www.roancampingholidays.com, captured by ThreatCluster

www.roancampingholidays.com

incransom

Ransomware leak-site victim intelligence · NL

Views
6,129
Posted
Sep 18, 2026
Country
Netherlands
Industry
tour operator

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Incransom claims that data including contracts, confidential materials, financial data, HR records, and incident reports were taken from Roan Luxury Camping Holidays, a Netherlands-based tour operator with about $50 million in revenue. The leak page identifies the victim as Roan Luxury Camping Holidays and lists the domain www.roancampingholidays.com. The leak page is listed on the group’s site, indicating publication status as active.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
www.roancampingholidays.com

What was taken

Roan Luxury Camping Holidays is a Dutch tour operator specializing in deluxe mobile home and tent rentals at 4- and 5-star campsites across Europe

Data categories
ContractsConfidentialFinancial dataHRIncidents
Leak site tags
Encrypted AD DumpProofStocks

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture