Katathani Phuket Beach Resort

Katathani Phuket Beach Resort was compromised in a ransomware attack attributed to dragonforce in July 2026. The organization, operating in the Hospitality sector in Thailand, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Katathani Phuket Beach Resort is a luxury beachfront resort located on Kata Noi Beach in Phuket, Thailand, offering a range of accommodations from suites to family-friendly rooms. The resort features world-class amenities including multiple dining options, a spa, fitness facilities, and a kids club, catering to couples, families, and solo travelers alike. Guests can enjoy stunning ocean views, direct beach access, and a variety of recreational activities, ensuring a memorable stay in a tranquil setting. With its commitment to providing exceptional service and a serene atmosphere, Katathani is an ideal destination for those seeking relaxation and luxury in paradise.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.