Ransomware group incransom hits Seetelhotels.de
Seetelhotels.de — a hospitality target operating in DE has been listed by the incransom ransomware group on 2026-10-19. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Seetelhotels.de |
|---|---|
| Threat Group | incransom |
| Summary | Seetelhotels.de, a hospitality organization in Germany, was listed by the incransom ransomware group on its leak site on 2026-10-19. |
| Date of Breach | 2026-10-19 |
| Discovery Date | 2026-10-19 |
| Region | DE |
| Target Domain | Seetelhotels.de |
| Business Sector | Hospitality |
| Severity | MEDIUM |
Claim by incransom
Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised. The affected data includes, but is not limited to: Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences. Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.
Posted by the incransom threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
Seetelhotels.de
Leak post (onion / Tor)
http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6ad64a4a9cd108bf2678b86e
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.