Columbia Hospitality

On January 21, 2025, the Vermont Office of the Attorney General disclosed a data security breach affecting **Columbia Hospitality**, originating from unauthorized access detected on **July 30, 2024**. The incident involved the compromise of personal information, though the specific types of exposed data (e.g., names, financial records, health details) remain classified as **'UNKN'** (unknown). While the full scope of the breach is still under investigation, the unauthorized access suggests potential exposure of sensitive customer or employee records, raising concerns over identity theft, financial fraud, or reputational harm. The delay between the breach discovery and public notification (nearly six months) may further exacerbate risks, as affected individuals were left uninformed during a critical window. The incident underscores vulnerabilities in Columbia Hospitality’s cybersecurity defenses, particularly in detecting and mitigating prolonged unauthorized access. No ransomware demands or immediate operational disruptions were reported, but the breach’s focus on personal data aligns with patterns seen in targeted cyber intrusions aimed at harvesting valuable information for malicious use.

Source: https://ago.vermont.gov/document/2025-01-21-columbia-hospitality-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/columbia-hospitality

"id": "col040090625",
"linkid": "columbia-hospitality",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Hospitality',
                        'name': 'Columbia Hospitality',
                        'type': 'Organization'},
                       {'industry': 'Legal/Regulatory',
                        'location': 'Vermont, USA',
                        'name': 'Vermont Office of the Attorney General',
                        'type': 'Government'}],
 'data_breach': {'personally_identifiable_information': True,
                 'type_of_data_compromised': 'UNKN (Personal Information)'},
 'date_detected': '2025-01-21',
 'date_publicly_disclosed': '2025-01-21',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'security incident involving Columbia Hospitality that may '
                'have affected personal information of individuals. The breach '
                'began on July 30, 2024, and involved unauthorized access to '
                'certain data, with affected information details currently '
                "labelled as 'UNKN'.",
 'impact': {'data_compromised': 'UNKN'},
 'investigation_status': "Ongoing (details labelled as 'UNKN')",
 'references': [{'date_accessed': '2025-01-21',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': [{'date': '2025-01-21',
                                                         'entity': 'Vermont '
                                                                   'Office of '
                                                                   'the '
                                                                   'Attorney '
                                                                   'General'}]},
 'title': 'Data Security Incident at Columbia Hospitality',
 'type': 'Data Breach'}