rhactushotel.com Listed by lockbit5 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

rhactushotel.com, the website of Rhactus Hotel in El-Alamein, Egypt, was listed on May 07, 2026 by the lockbit5 ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. No confirmed count of affected individuals has been made public, and the organisation has not issued a statement on the incident.

Inside the incident

The only confirmed detail is the appearance of rhactushotel.com on the lockbit5 leak site on the reported date. The group claims that files were taken from the hotel’s systems. No information has been released about the timing of the intrusion, the volume of data involved, or the method used to gain access. It remains unknown whether any data has been published or whether ransom demands were met.

Inside lockbit5

Lockbit5 is part of the LockBit ransomware operation, a group that has conducted numerous attacks since 2019. The group typically uses double-extortion tactics: encrypting systems and threatening to release stolen files if payment is not received. Its listings on dedicated leak sites are public claims of compromise; independent verification of each entry is not always available. The group has targeted organisations across multiple sectors and countries in prior incidents.

Who is rhactushotel.com?

Rhactus Hotel operates as an accommodation provider in El-Alamein, Egypt. Hotels routinely collect and store guest registration details, booking records, payment information, and internal operational documents. A compromise at such a facility can therefore involve data that identifies individuals who have stayed or made reservations at the property.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific file types or data categories has been disclosed. Organisations of this kind commonly hold names, contact details, passport or identity numbers, payment card data, and reservation histories, yet the exact contents of any exfiltrated material remain unconfirmed.

The real-world impact

Individuals whose information appears in the files may face risks of identity misuse or targeted fraud if the data later becomes public. The hotel itself may incur costs related to investigation, system restoration, and any regulatory obligations that arise. At present, the scale of exposure and the likelihood of further publication are not known.

What to do if you're exposed

Monitor bank and credit-card statements for unusual activity and consider placing a fraud alert with credit agencies. Use strong, unique passwords and enable multi-factor authentication on accounts linked to the hotel. Readers can run a free exposure scan of their email address against known breach data to check for appearances in previously published records.

AICompiled with AI assistance from public sources and published under our editorial standards.