Maine Hospitality Company Faces Class-Action Lawsuit Over 2025 Data Breach
Maine Course Hospitality Group, a company managing hotels across Maine, New England, and New York including Portland’s Courtyard by Marriott is the target of a proposed class-action lawsuit following a cyberattack that exposed the personal data of over 7,100 individuals.
The breach, discovered in November 2025, compromised sensitive information, including names, Social Security numbers, and driver’s license details. Of those affected, 3,989 were Maine residents. The company filed a data breach notice with the Maine Attorney General’s Office last week, nearly nine months after detecting the incident.
The lawsuit, filed in U.S. District Court in Maine, alleges the company failed to secure customer data and violated Maine’s data breach notification law, which requires prompt disclosure typically within 30 days of discovery. The plaintiff seeks class-action status, damages, and other relief for those impacted.
In response, Maine Course Hospitality Group is offering one year of free credit monitoring and identity protection services to affected individuals. The company has not publicly commented on the lawsuit or breach.
Maine Course Hospitality Group cybersecurity rating report: https://www.rankiteo.com/company/maine-course-hospitality-group
"id": "MAI1786084376",
"linkid": "maine-course-hospitality-group",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '7100',
'industry': 'Hospitality',
'location': 'Maine, New England, New York',
'name': 'Maine Course Hospitality Group',
'type': 'Hospitality Company'}],
'customer_advisories': 'One year of free credit monitoring and identity '
'protection services offered to affected individuals',
'data_breach': {'number_of_records_exposed': '7100',
'personally_identifiable_information': 'Names, Social '
'Security numbers, '
'driver’s license '
'details',
'sensitivity_of_data': 'High (Social Security numbers, '
'driver’s license details)',
'type_of_data_compromised': 'Personal Identifiable '
'Information (PII)'},
'date_detected': '2025-11',
'date_publicly_disclosed': '2026-08',
'description': 'Maine Course Hospitality Group, a company managing hotels '
'across Maine, New England, and New York including Portland’s '
'Courtyard by Marriott, is the target of a proposed '
'class-action lawsuit following a cyberattack that exposed the '
'personal data of over 7,100 individuals. The breach '
'compromised sensitive information, including names, Social '
'Security numbers, and driver’s license details.',
'impact': {'data_compromised': 'Personal data, including names, Social '
'Security numbers, and driver’s license '
'details',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class-action lawsuit'},
'references': [{'source': 'Maine Attorney General’s Office'}],
'regulatory_compliance': {'legal_actions': 'Class-action lawsuit filed in '
'U.S. District Court in Maine',
'regulations_violated': ['Maine’s data breach '
'notification law'],
'regulatory_notifications': 'Filed with Maine '
'Attorney General’s '
'Office'},
'response': {'communication_strategy': 'Data breach notice filed with Maine '
'Attorney General’s Office; offering '
'one year of free credit monitoring '
'and identity protection services'},
'title': 'Maine Hospitality Company Faces Class-Action Lawsuit Over 2025 Data '
'Breach',
'type': 'Data Breach'}