Costa Del Sol Hotels Listed by Sarcoma Ransomware Group

On October 9, 2024, Costa Del Sol Hotels, a Kuwaiti hospitality company operating two premier hotels and a rural estate since the 1980s, appeared on the leak site of the sarcoma ransomware group. The listing claims the attackers exfiltrated 50.5 GB of internal files during a ransomware incident. The company has not yet issued a public breach notification detailing the exact data involved or the number of people affected.

Details from the Leak Listing

The sarcoma leak site states that Costa Del Sol Group suffered a ransomware attack in which internal files were taken. It lists the data volume as 50.5 GB in an archive containing files, though it does not specify which systems were compromised or the precise categories of information exposed. The disclosure indicates the company is based in Kuwait and manages hospitality properties. No ransom demand figure or negotiation status is shown on the listing, and the exact deadline for any extortion payment remains unknown.

Public reporting on sarcoma confirms the group routinely publishes samples or full datasets when victims do not pay. The primary source does not quantify how many customer records, employee records, or vendor documents may be inside the archive.

Why This Matters for You and Your Family

If you have stayed at either of the Costa Del Sol hotels, dined at their restaurants, or attended events at the rural estate, your personal information could be among the stolen files. Hotels routinely collect names, home addresses, phone numbers, email addresses, passport or national ID copies, payment card details, and booking histories. When such data leaves the company’s control, it can be used for identity theft, fraudulent bookings, or targeted phishing campaigns against you and your family.