holidaypalace.com Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 2, 2026, the ransomware group apt73 listed holidaypalace.com on its leak site. The number of individuals affected is not known, and the precise contents or volume of any material taken have not been confirmed publicly. The listing indicates that internal files belonging to the Holiday Palace Hotel in Spain were removed during a ransomware operation. For anyone whose information may have been stored by the hotel, the practical concern is whether personal or financial details now circulate outside the organisation’s control.

Inside the incident

The incident came to light through the group’s public listing on July 02, 2026. The only detail provided is that internal files were allegedly exfiltrated in a ransomware attack. No information has been released about the date of the intrusion, the method used to gain access, the number of files involved, or whether any material was subsequently published.

Who is apt73?

apt73 is a ransomware group that maintains a leak site where it lists organisations it claims to have targeted. Such groups commonly combine encryption of systems with the removal of data, then use the threat of publication to pressure victims. Public reporting on the group’s prior activity shows a pattern of naming hospitality and other service-sector entities, though each listing remains an unverified claim until independently confirmed.

About holidaypalace.com

Holiday Palace Hotel operates in the hospitality sector in Spain. Businesses of this type routinely collect and store guest registration details, booking records, payment information, and internal operational documents to manage reservations and daily operations. A breach at such an organisation can affect both travellers and employees whose records are held in the same systems.

The information in question

The listing states that internal files were exfiltrated. No further breakdown of file types or data categories has been released. Organisations in this sector commonly retain names, contact information, passport or identity document numbers, payment card details, and internal reports; however, the exact contents of the files taken in this case remain unconfirmed.

What's at stake

Individuals whose records appear in the exfiltrated material could face risks of account takeover or targeted fraud if login credentials or financial details are among the files. The hotel itself may encounter regulatory scrutiny and costs associated with investigation and notification. Because the scale of exposure is not yet known, the full extent of these consequences cannot be assessed at present.

Were you affected?

Begin by contacting Holiday Palace Hotel directly to ask whether your information was involved and what steps the organisation is taking. Review bank and email accounts for unusual activity and enable multi-factor authentication where available. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.