LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › felizhotelboracay.com Listed by lockbit5 Ransomware Group

HIGH severityUnverified claimHow we verify

felizhotelboracay.com Listed by lockbit5 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·June 20, 2026
felizhotelboracay.com Listed by lockbit5 Ransomware Group

Occurred June 2026 · publicly disclosed June 20, 2026.

HIGH
Severity
June 20, 2026
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

felizhotelboracay.com was listed by the LockBit5 ransomware group on June 20, 2026, with internal files reported as exfiltrated; the actual date of the intrusion has not been established. Individuals who may have interacted with the site should check for any alerts and consider changing passwords or monitoring accounts.

Severity & verification
HIGH severityUnverified claim
Data types not itemised.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

On June 20, 2026, the ransomware group lockbit5 listed felizhotelboracay.com on its leak site, stating that internal files had been exfiltrated during a ransomware attack. The number of people affected has not been disclosed, and no further details on the volume or contents of the data have been made public.

Inside the incident

The only confirmed information is the date the listing appeared and the group's assertion that files were taken in a ransomware operation. No timeline for the initial compromise, no description of the intrusion method, and no count of records or files have been released by either the organization or the group. Public reporting on the event remains limited to the existence of the claim itself.

Who is lockbit5?

LockBit operates as a ransomware-as-a-service model in which developers supply encryption and leak-site tools to affiliate operators who conduct the intrusions. The group has been publicly linked to hundreds of incidents across multiple countries and sectors since its emergence around 2019. Its standard approach includes encrypting systems and threatening to publish stolen data if a ransom is not paid. Any specific claim the group makes about a victim must be treated as unverified until independently confirmed.

About felizhotelboracay.com

Feliz Hotel Boracay is a hospitality business operating on Boracay Island in the Philippines. Organizations in this sector routinely maintain systems for reservations, guest check-in, payment processing, and staff administration. These systems commonly store contact details, identification documents, booking histories, and financial information tied to transactions.

What was likely exposed

The facts state only that internal files were exfiltrated. No specific categories of data, such as guest names, passport numbers, credit-card details, or employee records, have been identified in public reporting. Hospitality operators typically hold personal and financial information necessary for bookings and compliance, yet the precise contents of the exfiltrated files remain unconfirmed.

What's at stake

Individuals whose information appears in the files may face risks of targeted phishing, account takeover, or identity misuse if the material is later published or sold. The organization faces potential operational disruption, regulatory scrutiny under applicable data-protection rules, and loss of customer trust. Both outcomes depend on the actual sensitivity of the files and whether they are released.

Were you affected?

Begin by monitoring official statements from felizhotelboracay.com for any direct notification. Change passwords for any accounts linked to the hotel and enable multi-factor authentication where available. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

Companyfelizhotelboracay.com security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See felizhotelboracay.com’s full breach history →

More recent breaches

majorcineplex.com Listed by lockbit5 Ransomware GroupJune 20, 2026casaandina.com.co Listed by lockbit5 Ransomware GroupJune 20, 2026parkviewtaipei.com Listed by lockbit5 Ransomware GroupJune 17, 2026rhactushotel.com Listed by lockbit5 Ransomware GroupMay 7, 2026

Latest breaches

Read GalaxyWarden’s full analysis of the felizhotelboracay.com Listed by lockbit5 Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by lockbit5 — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram