Luxury Hotel in Cebu
bd_e2020eb7fb0b2ffd · schema v1 · pii pii-v1
Full breach record for Luxury Hotel in Cebu →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Stormous on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Full reservation databases Booking platform references (including HeyTripGo) Payment Data PDF files containing credit card numbers, expiration dates, and CVV codes Scans of physical card images used in transactions Names and billing addresses linked to cards Full reports of transaction history Partner comission data and invoice logs ID Documents Guest registration forms (with physical signatures) Internal Communication Booking confirmation exchanges with platforms (HeyTripGo, Agoda, etc.) It was clearly observed that HeyTripGo.com does not encrypt or anonymize customer booking details, allowing direct exposure of Raw redit card data Customer personal details Booking references traceable to their system
Source provenance
- Source URL
- https://www.ransomware.live/id/d3d3LmpwYXJraXNsYW5kcmVzb3J0LmNvbUBzdG9ybW91cw==
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 15, 2025
- Raw hash
- 4fc3e8b4bb3ee7e3a00b5d2cafb46a6342d0aa28098f03620472177317feb168
Reporting entity
- Name
- stormous
Victim entity
- Name
- Luxury Hotel in Cebunorm: luxury hotel in cebu
- Domain
- jparkislandresort.com
- Industry
- Hospitalityllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· stormous
- Threat actor
- StormousExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.