felizhotelboracay.com Listed by lockbit5 Ransomware Group

On June 17, 2026, the LockBit5 ransomware group added felizhotelboracay.com to its public leak site, claiming that internal files had been exfiltrated from the Philippine resort’s systems during a ransomware attack.

Confirmed Attack Details

Public reporting indicates the hotel’s data was stolen and is now hosted on the LockBit5 leak page. The listing includes samples of the stolen material, though the precise volume and full list of records remain undisclosed. No specific count of affected guests or employees has been published. The breach follows the group’s standard pattern of initial access, data theft, and public extortion pressure.

Why This Matters for You and Your Family

When a hotel you or your family stayed at loses control of its internal files, personal details you provided during booking can appear in criminal hands. Reservation records, email addresses, phone numbers, payment information, and occasionally passport copies or home addresses are common in hospitality breaches. Once exposed, these details fuel identity theft, phishing campaigns, and unwanted contact that can last for years. Your family’s travel history becomes a map that criminals can use to target you at home.

The Doxxing and Identity-Chain Risks

A single hotel breach rarely stays isolated. Criminals combine the leaked reservation data with information from other sources to build complete identity chains. An email address from the Feliz Hotel files can be matched to gaming accounts, social-media handles, or school records belonging to you or your children. This chaining turns a vacation booking into a gateway for doxxing, account takeovers, and harassment. Credential leaks like this one frequently cascade into gaming platforms where children’s accounts are linked to the same family email or address.

LockBit5’s Publicly Known Track Record

Public reporting attributes LockBit5 as the latest iteration of the LockBit ransomware operation, which first gained notoriety in 2020. The group has targeted hospitals, schools, manufacturers, and small businesses worldwide. Its typical playbook involves stealthy initial access, exfiltration of sensitive files, followed by dual extortion: demanding ransom for decryption and threatening to publish the data if payment is not made. LockBit5 continues this model, using its dark-web leak site to pressure victims and advertise stolen data to other criminals.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used when booking at Feliz Hotel Boracay or any similar resort, and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can chain back to the same address or email.
• Let remediation specialists perform hands-on takedown requests across data brokers and exposed surfaces on your behalf.

The incident shows that even a single booking at a compromised hotel can feed long-term identity risks. Acting quickly to understand your exposure and close the gaps gives you and your family the best chance of staying ahead of opportunistic criminals. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts.