Columbia Hospitality Data Breach Exposes Sensitive PII

Columbia Hospitality, Inc., a prominent player in the hospitality industry, recently experienced a significant data breach that has affected thousands of individuals. On December 18, 2024, the company discovered unauthorized access to its network, which led to the exposure of sensitive consumer information.

This breach has impacted a total of 4,514 people across the United States, including residents of Maine and Massachusetts.

The breach occurred on July 30, 2024, when Columbia Hospitality detected unusual network activity. Upon discovery, they immediately secured their systems and engaged cybersecurity experts to investigate the incident. The forensic investigation revealed that an unauthorized actor had gained access to Columbia's network, potentially acquiring personal information without authorization.

The compromised data includes:

• Social Security numbers
• Names

Columbia Hospitality's Response

In response to the breach, Columbia Hospitality took swift action to secure their environment and launched a thorough investigation to determine the extent of the incident. They have notified affected individuals and are offering complimentary credit monitoring and identity protection services through IDX. These services include 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.

If you believe you might be affected by this breach, it is crucial to take advantage of the offered identity protection services. Enroll in the services by visiting IDX's enrollment page or calling (877) 719-8145. Additionally, remain vigilant by monitoring your credit reports and account statements for any suspicious activity.

For more detailed information about the breach, you can refer to the official disclosures provided to the Maine Attorney General and the Massachusetts Attorney General. Additionally, the Vermont Attorney General's website provides further information regarding the breach notification.