fbpx

Chedi Muscat Data Breach

THIS ACTION IS NOW CLOSED

The Chedi Muscat is a lavish beach resort in Oman. But guests staying at this hotel could have been put at risk after cybercriminals accessed their personal data. This was not the five-star experience they were promised by the hotel. This page explains how the Chedi Muscat data breach happened.

What happened in the Chedi Muscat data breach?

Our investigations revealed that the Chedi Muscat suffered a security breach to its operating systems following a ransomware attack. The active directory was attacked by Sekhmet ransomware.

The hotel reported the incident to the authorities in October 2020, but it did not notify affected customers at the same time. 

If you were a customer of the Chedi Muscat between October 2019 and October 2020, your data could have been included in this data security incident. 

The following data may have been exposed in the breach:

Victims of the Chedi hotel data breach could have been at risk

A ransomware attack happens when criminals infect an organisation’s systems and prevent or limit access unless a ransom is paid. Ransom may also be requested to stop the criminals releasing sensitive data into the public domain. Finding out that your personal data has been held hostage in a ransomware violation can be extremely distressing.

To make matters worse, data stolen in ransomware attacks is often put up for sale on the dark web and bought by criminals who want to commit further crimes against you. So it’s no wonder that people commonly suffer emotional anguish, anxiety, and stress after a ransomware data hack.

We recommended that anyone who had stayed at the Chedi Muscat between October 2019 and October 2020 take steps to protect themselves from phishing and fraud attempts.

Chedi Muscat Hotel data breach timeline

  • 14 October 2020
    Hotels Management Company International SAOG (which owns the Chedi Muscat Hotel) admitted that the resort had experienced a data security breach in its operating systems.

Your questions answered

See our answers to the FAQs we get asked about the Chedi Muscat Data Breach.

How did the security incident happen?

The company experienced a cyber-attack resulting in a breach of its data and network. The active directory was attacked by Sekhmet ransomware.

What data was accessed?

The stolen information may have included:

Was my information accessed in the breach?

If you were a customer of the Chedi Muscat between October 2019 and October 2020, your data could have been included in this data security incident.