Glenhardie Country Club Data Breach

qilin listed Glenhardie Country Club, a US hospitality organization, on 2026-10-10. The group has claimed 214 victims in the past 60 days, placing it among the more active threat actors currently. qilin’s primary targeting is in Manufacturing and Technology, with victims primarily located in the US, UK, and Germany. The inclusion of Hospitality, an industry outside qilin’s typical focus, suggests a strategy of volume-driven targeting rather than a specific sectorial preference. This broad approach means that organizations within less frequently targeted sectors, like hospitality, may still be at risk.

Verdict: no_exposure_in_sample. No credentials linked to Glenhardie Country Club’s domain were recovered from the current dataset. This null result means that the initial access path for this incident is not confirmed through credential theft. qilin affiliates frequently exploit public-facing vulnerabilities, such as those found in VPN appliances, web applications, and mail servers. These methods of initial access can occur without leaving a footprint in stealer logs, meaning the absence of such data does not rule out a compromise. External attack surface review and patch status verification on internet-facing systems are the immediate priorities for Glenhardie Country Club. Hospitality organizations typically have exposed systems for reservations, scheduling, and payment processing, which can create exploitable entry points. SOCRadar will continue to monitor for any evidence of exfiltration related to this incident.

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.