Home › All Victims › hallidays.co.uk

hallidays.co.uk

blackbasta

This record tracks a ransomware attack claimed by the blackbasta group against hallidays.co.uk. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.

Window Zero

EXPOSURE GAP

Window Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.

1004days open
t1 · Published t2 · Pending
Dec 06, 2023Not disclosed yet
Country
United Kingdom
Business Category
Energy
Employees
51-100
Discovered
2023-12-18
Published
December 06, 2023
Disclosed / Notified
Not disclosed yet
Victim ID
fD0EIo2OTfql

Attack Summary

Hallidays we’re much more than accountants, we’re business partners to our clients. We support them and help them to grow in a wide range of ways. If you’re an ambitious business that wants to grow, we’re the team you want in your corner.SITE: www.hallidays.co.uk Address Riverside House, Business Park Kings Reach, Yew St Stockport SK4 2HD United Kingdom 0161 476 8276FULL DATA SIZE: 572gb 1. Accounting 2. HR 3. ConfidentialityNETWORK: HALLIDAYSCNS-------------------------DOMAIN ADMINS------------------------- Administrator ChristianW haladfsuser Lyndsey SCVMMAdmin ServerAdmin TMPAdminhallidayscns\administrator mYSTICtEA-------------------------DC------------------------- HALDC04.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.221 Windows Server 2016 Standard HVM-DC01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.67 Windows Server 2019 Standard-------------------------SERVERS------------------------- HVM-S2DCluster.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.51 Windows Server 2019 Datacenter HVMS2DREPLICA.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.119 Windows Server 2019 Datacenter HVM-S2DSRV02.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.54 Windows Server 2019 Datacenter HVM-FILE04.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Datacenter HVM-FILE05.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.92 Windows Server 2019 Datacenter HVM-ADFS01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.93 Windows Server 2019 Datacenter SOFS01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.58 Windows Server 2019 Datacenter HVM-RD01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Datacenter HVM-VEEAM01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.88 Windows Server 2019 Datacenter HVM-S2DSRV01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.52 Windows Server 2019 Datacenter HVM-S2DSRV04.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.58 Windows Server 2019 Datacenter HVM-VAR01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Datacenter HVM-S2DSRV03.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.56 Windows Server 2019 Datacenter HVM-SCOM01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Datacenter Evaluation HVM-FILE01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.72 Windows Server 2019 Standard HVM-TS01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.97 Windows Server 2019 Standard HVM-CTXDCLIC01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.68 Windows Server 2019 Standard HVM-DEV08.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.94 Windows Server 2019 Standard APP001.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.1.129 Windows Server 2019 Standard HVM-APP01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Standard HVM-DM01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.99 Windows Server 2019 Standard HVM-MGT01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.66 Windows Server 2019 Standard HVM-CTXSF01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Standard HVM-VC01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.43 Windows Server 2019 Standard HVM-SQL01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Standard HVM-VMMSQL01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Standard HVM-PAYROLL01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.31 Windows Server 2019 Standard HVM-ACCOUNTS01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.74 Windows Server 2019 Standard HVM-FILE02.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Standard HVM-CTXSQL01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.47 Windows Server 2019 Standard HVM-FILE03.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2019 Standard HVM-PRINT01.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.75 Windows Server 2019 Standard HVM-CTXPVS03.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.89 Windows Server 2019 Standard HALTS01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2016 Datacenter HALRDS01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2016 Datacenter HALVAR02.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2016 Datacenter HALSQL04.HALLIDAYSCNS.HALLIDAYS.CO.UK 192.168.0.146 Windows Server 2016 Standard HALSQL03.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard HALVBS02.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard HALADFS02.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard HALADFS.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard HALPRINT01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard HALVC01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard HALFP02.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard HALPROF01.HALLIDAYSCNS.HALLIDAYS.CO.UK Windows Server 2012 R2 Standard

Leak Screenshots

SAMPLE

This is what a leak gallery looks like. Sign in to see the screenshots our collector has actually taken of this listing.

file_tree.png
finance_2024.xlsx
passport_scan.jpg
contract_signed.pdf
Sign in or explore HaveIBeenRansom to view the full leak gallery.
View leak gallery →

Dark Web Exposure

Findings for hallidays.co.uk — indexed by HaveIBeenRansom.
0
found in Infostealer logs
318+
found in Traditional breaches
7+
found in Ransomware leaks
SevenRooms_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
VerificationsIO_BF.7z.011
Kedr | Forum 🪾 · breach
••• emails
OnlinerSpambot_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
Apollo.io DB 816millions.rar
Database World ROC · breach
••• emails
linkedIN_2.7z.001
Database World ROC · breach
••• emails
Database World ROC · breach
••• emails
Database World ROC · breach
••• emails
play · ransomware
••• emails
+ 17 more leak sources locked
Leak volumes are locked
Sign in to reveal how many records each source exposed and the remaining 20 sources.
Sign in Unlock with Enterprise →
Want the complete picture — passwords, machines, full leak files? It's all searchable on HaveIBeenRansom.
Search this victim →
Visit Website Original Post View Group: blackbasta

Related entries

schuff.com granbyindustries.com plasmatherm.com arunestates.co.uk brachot.com avril.ca
Legal Disclaimer: This ransomware victim record reflects information published on the operator's leak site. Breach.house only records what the operators themselves publish in the open. We take screenshots of their public pages and keep the proof material they post there, so that a listing can be verified and its status tracked over time. We do not purchase data, we do not solicit or encourage its publication, we do not access any private system, and we do not alter anything we record. Nothing is offered for download here, and detailed content is not published on this page or anywhere else on the public site: access to it is restricted to vetted customers under contract, for incident response, due diligence and cyber-resilience work. Breach.house is not affiliated with, and does not act on behalf of, the operators who publish this material. If you represent an organisation or individual named here and want a record reviewed or removed, contact us and we will act on it.