Ransomware: dragonforce claims Sinai Grand Casino (EG) — Hospitality and Tourism

On July 16, 2026, a ransomware incident involving the Dragonforce group was reported against the Sinai Grand Casino in Egypt, operating within the hospitality and tourism sector. The breach was published on the ransomware monitoring platform ransomware.live, though no specific regulatory framework or data disclosure details were provided in the alert. This event signals a continued threat to high-traffic, customer-facing industries where sensitive personal and financial data may be held.

Organizations in the hospitality, tourism, and gaming sectors across the EU should consider themselves directly affected, particularly those with operations in high-risk regions or handling payment card and guest data. The incident underscores the need for vigilance against ransomware groups targeting soft targets like casinos and hotels, which often rely on legacy systems or third-party vendors.

Compliance teams should immediately verify that their incident response plans are current and tested, including ransomware-specific playbooks. They must ensure that breach notification obligations under GDPR and relevant local laws are clearly mapped, with pre-approved templates for reporting to supervisory authorities within 72 hours. Additionally, teams should review cyber insurance coverage, conduct a tabletop exercise simulating a ransomware attack, and reinforce employee training on phishing and credential theft, as these are common entry points for groups like Dragonforce.