> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Gran Caribe Hotel Group Allegedly Breached, 26,000 Guest Passport Records and Full Corporate Systems Offered
- URL: https://darkwebinformer.com/gran-caribe-hotel-group-allegedly-breached-26-000-guest-passport-records-and-full-corporate-systems-offered/
- Published: 2026-08-11T17:50:03.000Z
- Updated: 2026-08-11T17:50:03.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![Cuba flag](https://flagcdn.com/w40/cu.png)Cuba Hospitality / State Enterprise Data for Sale 

## Gran Caribe Hotel Group Allegedly Breached, 26,000 Guest Passport Records and Full Corporate Systems Offered

An actor posting as **exfilar** is advertising what they describe as a complete dump of **Gran Caribe Hotel Group**, Cuba's largest state-owned tourism corporation, comprising **34 database backups totalling 110GB** taken from production servers. The material is said to span eight hotel properties and include **26,094 guest records with full names, nationalities, passport numbers, dates of birth, and stay dates** covering visitors from 70 countries, **873 employee files with salaries, national identity numbers, addresses and bank details**, complete accounting and inventory systems, loyalty membership data, and **guest internet accounts tied to Cuban identity numbers**. The asking price is **$10,000**. The claim is **unverified**.

Severity CRITICAL 

Guest records26,094

Volume110GB

Price$10,000

Actorexfilar

### ▣Post details

TargetGran Caribe Hotel Group

Country![Cuba flag](https://flagcdn.com/w40/cu.png)Cuba

SectorHospitality / State-owned

ListingSale — $10,000, escrow

Volume34 databases / 110GB

Scope8 properties, 2022–2025

ObservedAug 11, 2026

Actorexfilar

### !Allegedly included

- Guest passport numbers
- Guest names & nationalities
- Dates of birth
- Check-in and check-out dates
- Room assignments & billing
- Employee salaries
- Employee bank details
- Cuban identity numbers
- Staff addresses & phone numbers
- Loyalty programme members
- Guest internet credentials
- Telecom billing records
- Security operator accounts
- Accounting & budget systems
- Supplier contracts
- Inventory & asset registers

### ◱Screenshots

[ ![Gran Caribe Hotel Group Cuba database sale listing screenshot, August 2026 (1 of 3)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/321478923596782897356982359871.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/321478923596782897356982359871.png) [ ![Gran Caribe Hotel Group Cuba database sale listing screenshot, August 2026 (2 of 3)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/321478923596782897356982359872.png) Screenshot 2 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/321478923596782897356982359872.png) [ ![Gran Caribe Hotel Group Cuba database sale listing screenshot, August 2026 (3 of 3)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/321478923596782897356982359873.png) Screenshot 3 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/321478923596782897356982359873.png) 

### ⚠Potential impact

The **passport numbers are the standout**. Paired with full name, date of birth, and nationality, they form a travel-document identity set usable for account opening and document fraud, and they cannot be changed without applying for a new passport. Because the records also carry **stay dates and room assignments**, the set additionally establishes where identified foreign nationals were on given dates. Employee exposure is deeper still, combining **salary, bank details, home address and national ID**. The **guest internet accounts** warrant separate attention: Cuban internet access is provided through a state monopoly and tied to identity, so credentials and identity numbers together carry risk beyond ordinary account compromise.

### iStatus

Unverified 

The listing is unusually documented, with a database-by-database inventory, row counts, and samples the actor states were restored and verified. Dark Web Informer is **not reproducing the sample archive location or contact routes**. The stated breach date is **the day before posting**, indicating recent access if accurate. This is the same actor behind three separate disclosures published in the past week, operating at high tempo. Nothing has been independently corroborated. The claim is **unverified** and Gran Caribe has not publicly addressed it.

Want everything on this breach? **Paid subscribers** get the full claim details and more. Check out the [threat feed](https://darkwebinformer.com/threat-feed/), then after subscribing, search there for this alert. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE