The BALNEARIO DE MONDARIZ was targeted by the threat actor qilin, who claimed to have compromised the extensive hotel and thermal complex in Galicia, Spain, including its 194-room hotel, mineral medicinal waters, spa, and golf course. The incident highlights the vulnerability of the hospitality sector in Spain. #Spain
Incident Details
- Victim: BALNEARIO DE MONDARIZ
- Country: ES
- Actor: qilin
- Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=b3b6f630-f673-398d-84d9-50655ec7237c
- Discovered: 2025-07-24 18:12:29.276693
- Published: 2025-07-24 00:00:00.000000
Information
- Ransomware attack targeted El Balneario de Mondariz, a hotel and thermal complex in Galicia, Spain.
- The facility features 194 modern hotel rooms.
- It includes a balneario that utilizes mineral medicinal waters.
- The Palacio del Agua is a 3,000 square meter spa within the complex.
- The complex also has an 18-hole golf course and additional amenities.

Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.