CWT (Carlson Wagonlit Travel) Data Breach
In July 2020, multinational business travel management corporation CWT (formerly Carlson Wagonlit Travel), which manages travel operations for over one-third of the Fortune 500, suffered a devastating ransomware attack executed by the Ragnar Locker syndicate.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
6- Reservation and travel information
- Financial information
- Employee personal information
- Income levels
- Payment card information
- Direct messages and communications
About This Breach
The attackers incapacitated roughly 30,000 corporate endpoints and exfiltrated approximately 2 TB of sensitive corporate records. The compromised documents included client travel itineraries, corporate credit card billing records, financial audits, and employee tax files. CWT subsequently negotiated and paid a ransom of 414 Bitcoin (valued at approximately $4.5 million) to secure a decryptor.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
