Desorden Group hit Central Restaurants Group (CRG) in Thailand after it brought down their entire backend, which consists of 5 servers.
The data included hotel guest data included name, passport number, id number, phone, email, (some had the address of residence), check-in/departure time, etc., and also membership card details of Mister Donut, employee details, daily sales records of what they describe as thousands of restaurant outlets, and vendor purchase order details.
They investigated the incident and took preventive steps.
Source: https://www.databreaches.net/central-restaurants-group-in-thailand-hit-by-desorden/
"id": "CEN2015231222",
"linkid": "central-restaurants-group-co-ltd-",
"type": "Breach",
"date": "10/2021",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"