2026 Gran Caribe Hotel Group — forum dump sale claim; ~26K guest passports (unverified)
Data compromised
Actor-claimed (unverified): 26,094 guest records with names, nationalities, passport numbers, DOB, stay dates (70 countries); 873 employee files with salaries, national IDs, addresses, bank details; accounting/inventory/loyalty; guest internet accounts. Asking price $10,000. recordsAffected 26094 = actor guest count.
Technical writeup
Unverified leak-site / forum sale claim — Dark Web Informer reported August 11, 2026 that actor “exfilar” advertised a complete dump of Gran Caribe Hotel Group (Cuba’s largest state-owned tourism corporation): 34 database backups totalling ~110GB allegedly from production servers across eight hotel properties. The listing claimed 26,094 guest records with full names, nationalities, passport numbers, dates of birth and stay dates covering visitors from 70 countries, plus 873 employee files with salaries, national identity numbers, addresses and bank details, accounting/inventory systems, loyalty data, and guest internet accounts tied to Cuban identity numbers, priced at $10,000. DWI marked the claim unverified; Gran Caribe had not publicly addressed it at indexing. BreachHistory labels the row unverified and indexes recordsAffected 26094 as the actor-cited guest count.
Root cause
Unverified dark-web / forum sale claim by actor “exfilar” advertising alleged production database backups from Gran Caribe Hotel Group — organisation had not confirmed at indexing time.