Paraskevas, Alexandros ORCID: https://orcid.org/0000-0003-1556-5293 (2026) Cyber risk resilience quarterly : threat intelligence for hotel, restaurants and tourism sectors. Q3 2026. Technical Report. University of West London, London.

Preview

PDF Cyber Risk Resilience Quarterly Q3 2026 final fixed.pdf - Draft Version Download (688kB) | Preview

Abstract

This edition of the Cyber Risk and Resilience Quarterly examines cyber incidents that affected hotels, restaurant and food service operators, tourism businesses, aviation organisations and their technology suppliers between July and September 2026. Aviation appears as a full sector for the first time. The research records 99 incidents in the quarter, together with 13 earlier attacks that became public during it. Seventy-nine incidents rest on threat actor claims without independent confirmation, so the report separates leak site pressure from verified breaches. Among the confirmed cases, an API key exposed in website code was linked to the theft of about 8.8 million customer records at Manchester Airports Group, and the data was published after the group refused the ransom. Ransomware also returned as a cause of operational disruption, with six casinos closed in Slovenia and hotel reservations interrupted in Japan. Attackers reached customers through AI driven card skimming and a rogue in-flight Wi-Fi network. The report closes with recommendations and tabletop exercises for managers and security teams.

Item Type:	Report (Technical Report)
Subjects:	Hospitality and tourism > Hospitality Hospitality and tourism > Hospitality > Risk and reputation management Hospitality and tourism > Tourism
Date Deposited:	12 Nov 2026
Dates:	Date Publication status 15 October 2026 Accepted
School, department or research centre:	ICHARM (International Centre for Hospitality and Aviation Resilience Management) London Geller College of Hospitality and Tourism
URI:	https://repository.uwl.ac.uk/id/eprint/15791

Downloads

Actions (admin access)