lockbit3 attacks La Fonda

Incident Date:

September 6, 2022

World map

Overview

Title

lockbit3 attacks La Fonda

Victim

La Fonda

Attacker

Lockbit3

Location

Santa Fe, USA

New Mexico, USA

First Reported

September 6, 2022

La Fonda on the Plaza: A Historic Hotel Targeted by Lockbit3 Ransomware

La Fonda on the Plaza, a historic hotel located in Santa Fe, New Mexico, has been targeted by the ransomware group Lockbit3. The hotel, which is situated on the historic Santa Fe Plaza, is known for its unparalleled access to original artwork, entertainment, and attractions, making it a popular destination for tourists and locals alike.

Company Size and Industry Standout

La Fonda on the Plaza is a significant player in the hospitality sector, offering a range of services including three classic New Mexican dining experiences, event venues, and business facilities. The hotel has been recognized by Condé Nast Traveler Readers' Choice as the #2 Hotel in The Southwest and West, highlighting its commitment to service excellence.

Vulnerabilities and Targeting

The ransomware attack on La Fonda on the Plaza underscores the growing threat of cyberattacks in the hospitality industry. Hotels and hospitality companies are often targeted due to the vast amounts of guest data they hold, which can be exploited for financial gain or used to disrupt operations. In the case of La Fonda, the ransomware group Lockbit3 gained unauthorized access to the hotel's computer systems, disrupting access to certain servers and workstations.

Response and Mitigation

La Fonda on the Plaza responded to the attack by restoring their computer systems and data using available backups within two days. The hotel also offered identity theft and credit theft protection to its employees through Experian.

The attack on La Fonda on the Plaza serves as a reminder for all businesses, particularly those in the hospitality sector, to prioritize cybersecurity measures to protect against ransomware attacks and other cyber threats.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.