Maine Course Hospitality Group Data Breach Exposes Sensitive Information of 553 Vermont Residents
Maine Course Hospitality Group, a Freeport, Maine-based hotel management company, disclosed a data breach that compromised the personal and health information of at least 553 Vermont residents. The incident came to light after the ransomware group Qilin claimed responsibility on November 5, 2025, posting stolen data on the dark web via the Tor network.
The exposed data included government ID numbers, Social Security numbers, and health records, raising significant privacy and security concerns. The breach was officially reported to the Vermont Attorney General on July 31, 2026.
Maine Course Hospitality Group has begun notifying affected individuals, providing details on the compromised data and offering protective services. Those who receive a breach notification letter are advised to review it carefully, follow enrollment instructions for support, and retain the document for their records. Additional information is available through the company’s website or direct contact.
Source: https://www.claimdepot.com/data-breach/maine-course-hospitality-group-2026
Maine Course Hospitality Group cybersecurity rating report: https://www.rankiteo.com/company/maine-course-hospitality-group
"id": "MAI1785774871",
"linkid": "maine-course-hospitality-group",
"type": "Ransomware",
"date": "11/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '553 Vermont residents',
'industry': 'Hospitality',
'location': 'Freeport, Maine, USA',
'name': 'Maine Course Hospitality Group',
'type': 'Hotel Management Company'}],
'customer_advisories': 'Affected individuals advised to review breach '
'notification letter, follow enrollment instructions '
'for support, and retain the document for records. '
'Additional information available via company website '
'or direct contact.',
'data_breach': {'data_exfiltration': 'Yes (posted on dark web via Tor '
'network)',
'number_of_records_exposed': '553',
'personally_identifiable_information': 'Government ID '
'numbers, Social '
'Security numbers',
'sensitivity_of_data': 'High (Government ID numbers, Social '
'Security numbers, health records)',
'type_of_data_compromised': 'Personal and health information'},
'date_publicly_disclosed': '2025-11-05',
'description': 'Maine Course Hospitality Group, a Freeport, Maine-based hotel '
'management company, disclosed a data breach that compromised '
'the personal and health information of at least 553 Vermont '
'residents. The incident came to light after the ransomware '
'group Qilin claimed responsibility on November 5, 2025, '
'posting stolen data on the dark web via the Tor network. The '
'exposed data included government ID numbers, Social Security '
'numbers, and health records, raising significant privacy and '
'security concerns.',
'impact': {'brand_reputation_impact': 'Significant privacy and security '
'concerns',
'data_compromised': 'Government ID numbers, Social Security '
'numbers, health records',
'identity_theft_risk': 'High'},
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Qilin'},
'references': [{'source': 'Vermont Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to Vermont '
'Attorney General on '
'July 31, 2026'},
'response': {'communication_strategy': 'Notifying affected individuals, '
'providing details on compromised '
'data, and offering protective '
'services'},
'threat_actor': 'Qilin',
'title': 'Maine Course Hospitality Group Data Breach Exposes Sensitive '
'Information of 553 Vermont Residents',
'type': 'Data Breach, Ransomware'}