Ransomware needs a way in. Stolen credentials are the cheapest one.

Holiday Palace Ransomware Attack

holidaypalace.comRansomed

apt73/basheGroup

SpainCountry

Jul 2, 2026Discovered

Overview

View group profile

Domain

holidaypalace.com

Industry

Hospitality

Country

Spain

Discovered

about 2 months ago

Attack date

Jul 2, 2026

Confidence

75%

Severity

Medium

Status

Claimed

Threat group

apt73/bashe

Total victims

First seen

Mar 2026

Last seen

Jul 2026

Group status

active

Sophistication

Impact score

Threat level

2.1/10

Aggressiveness4.3/10

Lethality0/10

Criticality2/10

Status breakdown

Claimed

this victim

100.0%17

Targeted sectors

Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Hospitality

Known target sector

Country

Spain

Frequently targeted country

Other victims

View all (17)

Same group · apt73/bashe

Holiday Palace
Spain
Claimed
PT Portal Biz Nusantara
Indonesia
Claimed
elections.mia.gov.am
Armenia
Claimed
narit.or.th
Thailand
Claimed
providentgh.com
Ghana
Claimed
Dunav osiguranje
Serbia
Claimed

Group activity

Monthly attacks · apt73/bashe

total · avg 3.4/mo