Sectors

Hospitality, Gaming & Travel

Documented social engineering incidents targeting the hospitality, gaming & travel sector, sourced and fact-checked.


8 Cases
Confirmed

Yujing Zhang Mar-a-Lago Intrusion

A Chinese national talked her way past three layers of Mar-a-Lago's Secret Service and club-staff checkpoints using a false pool visit and an unverified.

Incident 2019Read →
Confirmed

12-Defendant Nationwide Business Email Compromise Ring (United States v. Bosket et al., District of South Carolina)

A federal grand jury in Columbia, South Carolina indicted 12 people on 12 counts (conspiracy, wire fraud, bank fraud.

Incident 2020Read →
Confirmed

MGM Resorts Help-Desk Vishing Breach (Scattered Spider, 2023)

Scattered Spider's ten-minute vishing call to MGM's help desk reset MFA and seized identity systems, an incident Moody's called credit-negative.

Incident 2023Read →
Confirmed

FIN7 BadUSB "Best Buy" Gift Card Mailings via USPS

FIN7 (Carbanak) mailed USPS packages disguised as Best Buy gift-card rewards containing BadUSB hardware implants to HR, IT.

Incident 2020Read →
Confirmed

FIN7 (Carbanak Group) DOJ Prosecutions: Fedorov, Hladyr, Kolpakov, and Iarmak (2018-2022)

DOJ unsealed indictments and won guilty pleas, prison terms, and multimillion-dollar restitution against FIN7 (Carbanak Group) members Fedir Hladyr.

Incident 2015Read →
Confirmed

Caesars Entertainment Vendor Social Engineering Breach (2023)

The Caesars Entertainment breach: Scattered Spider social-engineered an IT help desk, stealing a loyalty database and prompting a $15M ransom in 2023.

Incident 2023Read →
Confirmed

Carnival Corporation Employee Vishing Breach (2026)

A single vishing call impersonating Carnival's own IT security team convinced an employee to hand over credentials.

Incident 2026Read →
Confirmed

Axie Infinity / Ronin Bridge Heist: A Fake LinkedIn Job Offer That Cost ~$600M

Lazarus operators spear-phished a senior Sky Mavis engineer through a fake LinkedIn recruiting process and a spyware-laced job-offer PDF.

Incident 2022Read →
Explore more

Browse the rest of the library