RANSOMWARE VICTIMHOSPITALITY AND TOURISMDUPLICATE CLAIM

NKAR Travels & Tours

payload📍 LK (LK)📅 March 30, 2026
8
same group

Attack Intelligence

NKAR Travels & Tours was compromised in a ransomware attack attributed to payload in March 2026. The organization, operating in the Hospitality and Tourism sector in LK, was added to the group's data leak site as part of an extortion campaign.

payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

NKAR Travel House is a premier travel agency in Sri Lanka, offering a diverse range of carefully curated tours and travel packages tailored to various interests. Their services include classical, cultural, wildlife, wedding, and experiential tours, as well as luxury options and tailor-made experiences. The agency aims to provide guests with unforgettable journeys through Sri Lanka's rich heritage, stunning landscapes, and vibrant culture.

Additional Details

data_size
60 GB

Other Victims — payload (8)

Quick Facts

CountryLK (LK)
SectorHospitality and Tourism
Attack DateMar 30, 2026
Intel Sourceransomlook
StatusDUPLICATE CLAIM

Threat Group

payload
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.