Club Quarters Management Company, LLC

The Maine Office of the Attorney General disclosed a data breach affecting Club Quarters Management Company, LLC between August 17, 2022, and September 2, 2022. Unauthorized actors gained access to the company’s systems and exfiltrated files containing sensitive personal data, including Social Security numbers (SSNs) and financial account information of 2,522 individuals. The breach exposed highly confidential details, posing significant risks of identity theft, financial fraud, and long-term reputational harm to the affected individuals. While the exact method of intrusion remains undisclosed, the incident underscores vulnerabilities in the company’s data security protocols, particularly in safeguarding personally identifiable information (PII). The compromised data’s nature SSNs and financial records elevates the severity, as such information is a prime target for cybercriminals engaging in fraudulent activities or secondary attacks. The breach’s discovery and reporting in November 2022 suggest a delayed response, potentially exacerbating the exposure window for malicious exploitation.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6b98656c-502f-46fb-8bff-3286e64c4abd.shtml

TPRM report: https://www.rankiteo.com/company/clubquartershotels

"id": "clu000091825",
"linkid": "clubquartershotels",
"type": "Breach",
"date": "8/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 2522,
                        'industry': 'Hospitality',
                        'name': 'Club Quarters Management Company, LLC',
                        'type': 'Private Company'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 2522,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'financial account information']},
 'date_publicly_disclosed': '2022-11-03',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Club Quarters Management Company, LLC. The '
                'breach occurred from August 17, 2022, to September 2, 2022, '
                'resulting in unauthorized access and the copying of certain '
                'files containing Social Security numbers and financial '
                'account information. A total of 2,522 individuals were '
                'affected.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'financial account information'],
            'identity_theft_risk': 'High (SSNs exposed)',
            'payment_information_risk': 'High (financial account information '
                                        'exposed)'},
 'references': [{'date_accessed': '2022-11-03',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Club Quarters Management Company, LLC Data Breach (2022)',
 'type': 'Data Breach'}