southamericantours.com Listed by lockbit3 Ransomware Group

South American Tours was listed on the LockBit 3.0 ransomware leak site on March 10, 2023. The disclosure indicates that the company, a South American destination management company operating since 1973, had internal files exfiltrated during a ransomware attack. The leak-site listing does not detail what specific data was taken or how many individuals may be affected.

Reported Details from the Listing

The primary disclosure on the LockBit 3.0 leak site states that internal files were exfiltrated from southamericantours.com in a ransomware incident. No victim count, no list of exposed record types, and no ransom demand figure appear in the public listing. The notification simply confirms that data was allegedly stolen and that the company is now publicly named among LockBit’s victims. Public reporting on LockBit 3.0 shows the group routinely posts proof-of-exfiltration samples and gives victims a short window to negotiate before full data publication.

Why This Matters for You and Your Family

When a travel company’s internal files are stolen, customer records, booking details, passport copies, payment information, and contact data are often included. Even though the exact contents remain undisclosed, anyone who booked a tour, cruise, or incentive trip through South American Tours since 1973 should assume their personal information may now be in the hands of criminals. This exposure can lead to identity theft, fraudulent travel bookings made in your name, or targeted phishing emails that reference real trips you took. Your family members listed on group bookings are equally at risk.

The Doxxing and Identity-Chain Risk

Travel records frequently contain full names, home addresses, phone numbers, email accounts, dates of birth, and passport numbers. Once criminals possess this information they can link it to your social-media profiles, gaming accounts, and other online handles. A single leaked email from a booking can unlock password-reset flows across dozens of services. Children’s information included on family itineraries can also enter these chains, exposing gaming usernames and parent-linked accounts to takeover. The result is a widening doxxing spiral that moves from travel data to full identity compromise.

LockBit 3.0’s Known Track Record

Public reporting attributes LockBit 3.0 as the latest iteration of one of the most active ransomware operations, which first appeared in 2019 and rebranded multiple times while maintaining high operational tempo. The group has previously listed thousands of organizations across every sector, including healthcare providers, manufacturers, and professional-services firms. Their typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by rapid exfiltration of sensitive files before encryption. They then extort victims with dual threats: publication of stolen data on their leak site and, in many cases, direct contact with the victim’s customers or partners. The March 10, 2023 listing of South American Tours fits this pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you used when booking with South American Tours and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists manage takedown requests for any personal data already appearing on broker sites or forums tied to this incident.

The incident underscores that travel companies remain attractive targets because their databases hold rich personal detail that fuels long-term identity crimes. Staying ahead requires more than reactive checks; it demands ongoing visibility into how your information travels across the internet. DoxxScan by GalaxyWarden delivers exactly that through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today and close the gaps before the next breach exposes you further.