Centara Hotels & Resorts Company Cyber Security Posture
centarahotelsresorts.comCentara Hotels & Resorts is Thailand’s leading hotel operator, with 51 deluxe and first-class properties across all of the major tourist destinations in the Kingdom, as well as a further 23 hotels and resorts in the Maldives, Japan, Sri Lanka, Vietnam, Laos, China, Oman, Qatar and the United Arab Emirates. The diversity of Centara properties means that the brand can cater easily to all of the differing needs of couples, families, individuals, and business professionals. Centara also operates 22 branches of Spa Cenvaree, an award-winning spa brand, together with eight branches of the value brand Cense by Spa Cenvaree, which provides core spa services for busy travellers. The company’s Kids’ Clubs are available at all their family-friendly resorts to ensure that children – and their parents – can enjoy their own kinds of fun. Centara also operates state-of-the-art convention centres in Bangkok and in Udon Thani. The latest Centara brand to be launched is COSI Hotels, an affordable lifestyle brand designed for travellers who predominantly make their bookings via the internet and who want comfort and convenience at affordable prices; the first property is due to open in 2017.
CH&R Company Details
centara-hotels-&-resorts
1590 employees
45803.0
721
Hospitality
centarahotelsresorts.com
Scan still pending
CEN_2651612
In-progress
CH&R Risk Score (AI oriented)Between 900 and 1000
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
CH&R Global Score.png)
Centara Hotels & Resorts Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 900 and 1000 |
Centara Hotels & Resorts Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Centara Hotels & Resorts | Ransomware | 100 | 5 | 10/2021 | CEN229101122 | Link | |
Rankiteo Explanation : Attack threatening the organization's existenceDescription: Centara Hotel Group was targeted by the Desorden Group which resulted in a data breach incident. The breach impacted the network of 5 servers and breached over 400 GB of files and data having general personal data, financial data, corporate data, employee data, etc. of some of its customers. Central Group paid around $900,000.00 USD to Desorden. | |||||||
Centara Hotels & Resorts Company Subsidiaries
Centara Hotels & Resorts is Thailand’s leading hotel operator, with 51 deluxe and first-class properties across all of the major tourist destinations in the Kingdom, as well as a further 23 hotels and resorts in the Maldives, Japan, Sri Lanka, Vietnam, Laos, China, Oman, Qatar and the United Arab Emirates. The diversity of Centara properties means that the brand can cater easily to all of the differing needs of couples, families, individuals, and business professionals. Centara also operates 22 branches of Spa Cenvaree, an award-winning spa brand, together with eight branches of the value brand Cense by Spa Cenvaree, which provides core spa services for busy travellers. The company’s Kids’ Clubs are available at all their family-friendly resorts to ensure that children – and their parents – can enjoy their own kinds of fun. Centara also operates state-of-the-art convention centres in Bangkok and in Udon Thani. The latest Centara brand to be launched is COSI Hotels, an affordable lifestyle brand designed for travellers who predominantly make their bookings via the internet and who want comfort and convenience at affordable prices; the first property is due to open in 2017.
Access Data Using Our API
Get company history
Rapid.png)
CH&R Cyber Security News
Does the New Thailand Cybersecurity Law Go Too Far?
A new Thailand cybersecurity law went into effect recently, and is controversial more for what it doesn't specify than what it does.
AIS Thailand Cyber Attack Claimed By Desorden Hackers
Desorden is a Spanish term meaning disorder or confusion. The hacker group announced the AIS Thailand cyber attack and wrote, “We take responsibilities for the ...
CH&R Similar Companies
Caesars Entertainment
Caesars Entertainment, Inc. is the largest casino-entertainment Company in the U.S. and one of the world's most diversified casino-entertainment providers. Since its beginning in Reno, NV, in 1937, Caesars Entertainment, Inc. has grown through development of new resorts, expansions and acquisitions.
Hilton Grand Vacations
Hilton Grand Vacations is a global leader in vacation ownership, developing, marketing and operating a portfolio of high-quality, shared-ownership properties in highly desired vacation destinations. Our company also manages and operates innovative club membership programs providing exclusive exchang
Holiday Inn Express
An IHG hotel. IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. At Holiday Inn Express, we strive to make every interaction you have with us simple, smart and refreshingly engaging. With over 3,000 hotels in 75 di
Delaware North
Delaware North is a global leader in the hospitality and entertainment industry. The company annually serves more than a half-billion guests across three continents, including at high-profile sports venues, airports, national and state parks, restaurants, resorts, hotels and casinos. Building on mor
TUI
We’re adventure seekers. Smile givers. Impact makers. We believe in the power of travel. It broadens horizons for our customers, and for our people too. New places to live, new roles to explore, new communities to join. It’s yours for the taking. We’re TUI, a leading global travel and leisure exp
Caesars Entertainment
Caesars Entertainment, Inc. is the largest casino-entertainment Company in the U.S. and one of the world's most diversified casino-entertainment providers. Since its beginning in Reno, NV, in 1937, Caesars Entertainment, Inc. has grown through development of new resorts, expansions and acquisitions.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
CH&R CyberSecurity History Information
How many cyber incidents has CH&R faced?
Total Incidents: According to Rankiteo, CH&R has faced 1 incident in the past.
What types of cybersecurity incidents have occurred at CH&R?
Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.
What was the total financial impact of these incidents on CH&R?
Total Financial Loss: The total financial loss from these incidents is estimated to be $900 thousand.
Incident Details
Can you provide details on each incident?
Incident : Data Breach
Title: Data Breach Incident at Centara Hotel Group
Description: Centara Hotel Group was targeted by the Desorden Group which resulted in a data breach incident.
Type: Data Breach
Threat Actor: Desorden Group
Motivation: Financial Gain
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Ransomware.
Impact of the Incidents
What was the impact of each incident?
Incident : Data Breach CEN229101122
Financial Loss: $900,000.00 USD
Data Compromised: General Personal Data, Financial Data, Corporate Data, Employee Data
Systems Affected: 5 servers
What is the average financial loss per incident?
Average Financial Loss: The average financial loss per incident is $900.00 thousand.
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are General Personal Data, Financial Data, Corporate Data and Employee Data.
Which entities were affected by each incident?
Data Breach Information
What type of data was compromised in each breach?
Incident : Data Breach CEN229101122
Type of Data Compromised: General Personal Data, Financial Data, Corporate Data, Employee Data
Sensitivity of Data: High
Data Exfiltration: True
Personally Identifiable Information: True
Ransomware Information
Was ransomware involved in any of the incidents?
Additional Questions
General Information
Has the company ever paid ransoms?
Ransom Payment History: The company has Paid ransoms in the past.
Who was the attacking group in the last incident?
Last Attacking Group: The attacking group in the last incident was an Desorden Group.
Impact of the Incidents
What was the highest financial loss from an incident?
Highest Financial Loss: The highest financial loss from an incident was $900,000.00 USD.
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were General Personal Data, Financial Data, Corporate Data and Employee Data.
What was the most significant system affected in an incident?
Most Significant System Affected: The most significant system affected in an incident was 5 servers.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were General Personal Data, Financial Data, Corporate Data and Employee Data.
Ransomware Information
What was the highest ransom paid in a ransomware incident?
Highest Ransom Paid: The highest ransom paid in a ransomware incident was $900,000.00 USD.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
