Columbia Hospitality, Inc.

On January 21, 2025, the Maine Office of the Attorney General disclosed a data breach affecting Columbia Hospitality, Inc., stemming from a hacking incident on July 30, 2024. The breach compromised the personal information of 4,514 individuals, including 3 Maine residents. While the exact nature of the exposed data was not detailed, the company’s response—offering 12 months of credit monitoring and identity theft protection services—suggests the exposure likely included sensitive personal or financial details capable of facilitating fraud or identity theft.The breach, attributed to an external cyber attack, underscores vulnerabilities in the company’s digital defenses. Although no evidence of misuse was reported at the time of disclosure, the scale of affected individuals and the proactive remediation measures imply a significant risk of financial or reputational harm to those impacted. The incident aligns with broader trends in hospitality-sector breaches, where customer trust and operational integrity are critical concerns. Columbia Hospitality’s swift provision of protective services reflects an effort to mitigate long-term consequences, though the breach itself highlights persistent threats in data security management.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ead30118-532f-49a7-81b9-550115367f7f.html

TPRM report: https://www.rankiteo.com/company/columbia-hospitality

"id": "col715090125",
"linkid": "columbia-hospitality",
"type": "Cyber Attack",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 4514,
                        'industry': 'Hospitality',
                        'name': 'Columbia Hospitality, Inc.',
                        'type': 'Organization'}],
 'attack_vector': 'Hacking',
 'customer_advisories': {'identity_theft_protection_offered': True},
 'data_breach': {'number_of_records_exposed': 4514,
                 'personally_identifiable_information': True},
 'date_publicly_disclosed': '2025-01-21',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Columbia Hospitality, Inc. The breach '
                'occurred due to hacking, affecting 4,514 individuals, '
                'including 3 Maine residents. Columbia offered identity theft '
                'protection services, including 12 months of credit '
                'monitoring, following the incident.',
 'impact': {'data_compromised': True, 'identity_theft_risk': True},
 'references': [{'date_accessed': '2025-01-21',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': [{'authority': 'Maine '
                                                                      'Office '
                                                                      'of the '
                                                                      'Attorney '
                                                                      'General',
                                                         'date': '2025-01-21'}]},
 'response': {'law_enforcement_notified': True,
              'recovery_measures': {'identity_theft_protection_services': '12 '
                                                                          'months '
                                                                          'of '
                                                                          'credit '
                                                                          'monitoring'}},
 'title': 'Data Breach at Columbia Hospitality, Inc.',
 'type': 'Data Breach'}