The Akira ransomware group listed Refinery Hotel as a victim on its leak site on July 1, 2026, indicating a potential ransomware attack. The ransomware group claimed it would upload 15GB of corporate data. As of early July 2026, Refinery Hotel has not issued an official breach notification, nor has it publicly confirmed whether any data was actually stolen or compromised.
Specific details regarding the types of data exposed, the number of individuals affected, and the geographical scope of the incident remain unconfirmed. No state attorney general filings or breach notification letters have been reported, and no customers have been officially notified by the hotel. It is also unclear if the company is publicly traded or if this was a vendor breach.
Details about the extent of the incident may emerge as the situation develops. Official notices may be delayed.