On February 28, 2025, the Qilin ransomware group added gettys.com to its leak site, claiming that internal files had been exfiltrated from The Gettys Group, a hospitality company that has operated for more than 30 years.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch gettys.com
Get alerted the next time gettys.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about gettys.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the incident began as a ransomware attack in which Qilin gained access to the company’s systems, encrypted data, and then exfiltrated internal files before listing the victim on its dark-web portal. The exact number of people whose information may have been exposed remains unknown. Available reporting describes the stolen material as internal files; specific data types such as customer records, employee payroll, or vendor contracts have not been publicly detailed. The leak site entry carries the typical Qilin timestamp and reference number, and the group set its standard short extortion window.
Why This Matters for You and Your Family
When a company you have stayed with, booked events through, or shared personal details with suffers a breach, your information can end up in the hands of criminals. Even if you are not a high-profile guest, names, addresses, phone numbers, email accounts, and payment details routinely sit inside hospitality systems. Once those records leave the company’s control, they can be sold, traded, or used to target you and your family with identity theft, phishing, or harassment. Children’s information linked to family bookings or loyalty accounts is especially vulnerable because it often includes dates of birth that help criminals build fuller identity profiles.
The Doxxing and Identity-Chain Risk
A single breach rarely stays isolated. Criminals use leaked emails and phone numbers to locate associated usernames on social media, gaming platforms, and forums. From there they map connections across dozens of services, creating what security analysts call an identity chain. One compromised hotel booking can lead to a reused password that also protects your child’s Roblox or Fortnite account, turning a corporate ransomware incident into personal doxxing and account takeovers. Credential leaks like this one cascade quickly into broader exposure that can affect every member of a household.