www.holidaypalace.com Listed by Stormous Ransomware Group

On December 8, 2025, the ransomware group Stormous listed www.holidaypalace.com on its leak site, offering for sale a large volume of internal files that include customer email addresses, phone numbers, full names, dates of birth, payment and booking records, and scanned ID cards and passports used during reservations. The group claims it obtained full system access and extracted all available data. Anyone who made a booking or created an account on the travel and hospitality platform may have had personal information exposed.

What Public Reporting Shows

Public reporting on the ransomware.live portal shows that Stormous published the holidaypalace.com entry on December 8, 2025. The listing states that internal files were exfiltrated during a ransomware attack and are now offered for sale. The data categories explicitly mentioned include user information such as email, phone number, full name, and date of birth, along with payment and booking data and ID cards and passports submitted during the booking process. The group asserts it achieved full access to the system and extracted all data. The exact number of affected individuals has not been disclosed.

Why This Matters for You and Your Family

When a travel booking site loses copies of passports, payment details, and contact information, the risk extends far beyond one reservation. Identity thieves can use scanned government IDs to open accounts in your name, apply for credit, or create fraudulent travel documents. Phone numbers and email addresses enable convincing phishing texts and calls that appear to come from banks or airlines you actually use. For families, a single breach can expose every member listed on a shared booking, including children whose dates of birth and partial names are often included. Once this information is sold on criminal forums, it circulates for years.

The Doxxing and Identity-Chain Implications

Credential leaks of this type rarely stop at one site. Names, dates of birth, and phone numbers harvested from holidaypalace.com can be combined with data from earlier breaches to map your full digital footprint. Attackers link your booking email to gaming accounts, social media handles, and family addresses, creating detailed profiles used for doxxing, targeted extortion, or account takeovers. Gaming accounts belonging to children are especially vulnerable because the same password or security questions may have been reused. Available reporting describes these identity chains as one of the fastest-growing threats after travel and hospitality breaches.

Stormous Group Track Record

Public reporting attributes Stormous with emerging in 2020 and maintaining a consistent ransomware-and-extortion playbook. The group has targeted hospitals, schools, retailers, and travel companies, typically gaining initial access through phishing or unpatched remote desktop services. After exfiltrating data, Stormous posts samples on its leak site and demands payment to prevent full publication. Its operations have included double-extortion tactics against organizations in Europe, Latin America, and the Middle East. Exact success rates are difficult to verify, but the group continues to publish new victims on a regular basis.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, booking details, and real-world identity so you can see the full exposure from this incident.
• Rotate the password you used at holidaypalace.com anywhere it has been reused and switch to 2FA through an authenticator app instead of text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing your family is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and credentials.
• Let remediation specialists handle takedown requests for any exposed personal records appearing on data broker sites or criminal marketplaces.

The holidaypalace.com breach is a reminder that travel bookings create permanent digital records that criminals actively trade. Taking concrete steps now limits how far the stolen data can travel. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to the same credential cascades. Start your DoxxScan trial today to regain control of your family’s exposed information.