Hotelplan UK

Summary

Hotelplan UK experienced a cyber attack that prompted the isolation and shutdown of key systems while the company launched an investigation into the IT disruption. The group confirmed the incident stemmed from a cyber security event and said it is working to restore services, noting that already booked holidays and trips would not be affected. Executives stated that teams are operating around the clock to bring brands back online, with workarounds in place to limit disruption though some delays may occur. Communication to agents and suppliers emphasized that customers continue to depart normally and that contact remains available through usual channels, while apologizing for any inconvenience and thanking partners for their support.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Hotelplan UK reported a cyber security incident that caused IT disruption over the weekend of early December 2023, prompting the company to launch an investigation and temporarily isolate and shut down key systems. The statement issued on Tuesday confirmed that the disruption stemmed from a cyber attack affecting the group's operations. Hotelplan UK, which owns the brands Inghams, Explore Worldwide, Esprit Ski, Inntravel and Santa’s Lapland, said it had taken immediate steps to contain the incident by shutting down affected systems. The company emphasized that it was conducting a thorough investigation to determine the scope and cause of the breach while working to restore service levels. No further technical details about the attack vector or threat actors were disclosed in the public statement.

Chief executive Joe Ponte assured customers that holidays and trips already booked would not be impacted by the incident, while acknowledging that delays might occur as workarounds were introduced to minimise disruption. Ponte noted that the team was working around the clock to bring all brands back to full operational status so that agents, partners and customers could expect the usual level of service. In a message to travel agents and suppliers, he confirmed that customers were still departing as normal and that agents could continue to contact the group through existing channels. Ponte apologised for any inconvenience caused and thanked agents and partners for their support during the recovery effort. He also indicated that different brands might return to full operation at different times, reflecting the staggered restoration process. The company committed to providing updates as systems were brought back online and service levels were restored.

Sources

Sources available to members: 1 source.