What happened?

Suspicious email or call

Phishing, fake invoices, pressure to pay or share credentials.

Locked or encrypted systems

Ransom messages, files that cannot be opened, PMS unavailable.

Payment or card fraud

Tampered terminals, unusual chargebacks, card data concerns.

Guest data exposure

Lost device, misdirected email, documents left visible.

Physical access concern

Unknown person in server room, tampered network equipment.