Ransomware Attacks on Hospitality in the UAE
Ransomware groups have claimed 4 hospitality organisations in the United Arab Emirates since 2020, which is 3.6% of all attributed UAE claims. DragonForce accounts for 1 of them. The earliest claim in this sector was recorded on and the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. How this data is collected and filtered.
Which groups claim UAE hospitality organisations
All groups| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| DragonForce | 1 | 25% | |
| Everest | 1 | 25% | |
| INC Ransom | 1 | 25% | |
| Lamashtu | 1 | 25% | |
| Total | 4 | 100% |
How Hospitality claims spread across periods
All 4 claimed UAE hospitality organisations were recorded in 2026, and each was claimed by a different group.
Hospitality ranks tenth among UAE sectors with 4 claimed organisations
Hospitality sits tenth of 13 UAE sectors and carries 3.6% of all attributed claims. The count runs well below the average of 8.6 claims per active sector. The sector is the newest entry on this tracker.
Every Hospitality claim falls inside 2026
Leak-site monitoring recorded the first Hospitality claim against a UAE organisation on 4 May 2026. The most recent was recorded on 7 October 2026. The sector shows zero claims across 2020 to 2025.
Four distinct groups account for those 4 claims, which means one claim each. No group returned to the sector after its first appearance.
That distribution argues against a targeted campaign. Four unrelated operations reaching the same sector within five months reads as separate opportunities rather than as coordinated interest.
What this means for UAE organisations
- Treat the sector as newly exposed rather than as historically safe, because its entire record is five months old.
- Note that four separate groups reached it, so defending against a named actor would have addressed one claim in four.
- Map your obligations under the UAE Personal Data Protection Law, which reaches guest records and staff records alike.
- Review third-party booking and payment integrations, since these are the systems a hospitality operator least often controls directly.
- Read the 2026 period page for the wider context, because every claim here belongs to that year.
A sector with 4 claims and 4 groups carries no pattern worth modelling. Watch whether any group returns, because a second claim by the same operation would be the first real signal.
Hospitality entered the record in the same year that Education recorded its second and third claims. Both sectors sat at zero for the whole period before 2025.
