WHISKIJACKRESORTS.COM Listed by clop Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On January 25, 2026, the ransomware group clop listed WHISKIJACKRESORTS.COM on its leak site and stated that internal files had been taken from the Canadian resort operator. No figure for the number of individuals affected has been released, and the company has not issued a public statement confirming or denying the claims. The listing places the incident among the many ransomware operations that continue to target private-sector organizations in 2026. Such listings typically signal that data were removed before encryption occurred, though independent verification of the claims remains limited at this stage.

What happened

The only confirmed public record is the January 25, 2026 listing by clop. The group asserts that files were exfiltrated during a ransomware intrusion. No information has been released about the date of the intrusion itself, the volume of data taken, or whether encryption was deployed against the company’s systems. The number of people whose information may be involved is listed as unknown.

The group behind it: clop

Clop is a ransomware operation that has conducted intrusions since at least 2019. It is known for a double-extortion approach in which data are copied before encryption and then threatened with disclosure if a ransom is not paid. The group maintains a leak site where it posts names of organizations it claims to have targeted. Its listings are presented by the group itself and are not independently verified in every case. Clop has previously claimed victims across finance, manufacturing, and professional-services sectors.

WHISKIJACKRESORTS.COM and its sector

WHISKIJACKRESORTS.COM operates hotel and resort properties in Whistler, Canada. The company provides condominium, townhouse, and boutique-hotel accommodations along with packages that include skiing, golf, mountain biking, and hiking. Organizations in the hospitality sector routinely collect and store guest names, contact details, booking records, and payment information, as well as internal operational documents such as staff records and vendor contracts.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific file types or data categories has been published. While hospitality companies commonly hold personal and financial information belonging to guests and employees, the precise contents of the claimed exfiltration have not been disclosed. Any assessment of the data therefore remains unconfirmed beyond the general description provided by the listing.

Why it matters

Exposure of internal files can create operational and reputational consequences for the affected organization. For individuals, the risk depends on whether the files contain personal identifiers, contact information, or financial details. When such data appear in later disclosures, they can be used for targeted fraud or account takeover. Because the scale of the claimed incident is not yet known, the extent of any downstream impact cannot be quantified at present.

Were you affected?

Individuals who have stayed at properties operated by WHISKIJACKRESORTS.COM or who have provided personal information to the company can monitor official statements from the organization. A practical first step is to run a free exposure scan of the email address associated with any booking or account. Additional standard measures include reviewing bank and credit-card statements for unusual activity and enabling multi-factor authentication on any linked services.

AICompiled with AI assistance from public sources and published under our editorial standards.