Nordic Choice Hotels has confirmed that its systems were attacked by the Conti ransomware.
See also: Conti ransomware: $25.5 million in profits since July
The incident mainly affects the reservation systems and room cards of its hotels.
Although there is no indication that card or payment details are affected, information regarding guest reservations may have been leaked.
The Scandinavian hotel chain and its brands Comfort, Quality and Clarionemploy over 16,000 staff and have 200 properties across Scandinavia, Finland and the Baltics.
According to the announcement by the Nordic Choice Hotels group, its IT systems were affected by a cyberattack on Thursday, December 2.
The incident left hotel staff without access to the hotel's reservation systems that handle check-in, check-out, payments and reservations.
Although staff changed manual processes to conduct business, the hotel informed guests that delays were expected.
Members are currently unable to log into their Nordic Choice Hotels accounts to book or manage reservations, nor to apply the reward points system, although it is still possible to book accommodation without being logged in.
See also: JVCKenwood company attacked by Conti ransomware
The incident also appears to affect Nordic Choice Club members, in addition to hotel guests.
One of the guests, security researcher Runa Sandvik, also reported that the key cards were out of order.
Law enforcement agencies, including the Norwegian Data Protection Authority and the Norwegian National Security Authority, were notified of the attack by the hotel company on December 2.
“ Our investigations do not currently provide any indication that data has been leaked, but we cannot guarantee that this is the case. Therefore, the incident poses a risk of losing information about guest reservations ,” the company explains
“This information consists of name, email address, phone number, date of visit, and any information the visitor may have provided in connection with their visit. There is no indication that any card or payment details have been leaked.“
The group decided to promptly inform its members about the incident in an effort to keep them alert to any suspicious communications, such as messages, phone calls or emails, that may be addressed to them.
See also: Angry Conti ransomware collaborator leaks information
At present, the hotel company has not received a ransom demand from the Conti ransomware group.
In the coming days, as the company works with law enforcement to remediate the cyberattack, some hotel properties may continue to experience delays in check-in, check-out, and reservation processes.
