Threat Landscape Report: Uncovering Critical Cyber Threats to Hospitality and Recreation

Between Sept 1, 2024 and Feb 28, 2025 the hospitality and recreation sector faced a sharp rise in opportunistic and targeted attacks — a 433% surge in external remote service exploits and a large brute-force campaign impacting millions of IPs, widespread credential-harvesting phishing (44% of phishing emails), a 43% increase in ransomware incidents (109 victims on leak sites) with groups like Akira targeting casinos, and growing risks from cryptocurrency theft and insider threats; the report recommends MFA/conditional access, patching, segmentation of IoT, DRP and email authentication, and automated incident responses to improve resilience.