National hospitality operator confirmed an enterprise-wide ransomware attack claimed by the Kairos hacking group. Corporate administrative servers were encrypted, and a significant portion of internal employee payroll files, supplier contracts, and financial accounting books were exfiltrated.