Red Roof Inns, Inc.

The Maine Office of the Attorney General disclosed a data breach affecting Red Roof Inns, Inc. between September 21 and September 23, 2023, identified as an external hacking incident. The breach compromised personal information of 27,327 individuals, including 11 Maine residents. While the exact nature of the exposed data (e.g., financial records, identification details) was not fully specified, the scale and confirmation of personal information exposure suggest a significant privacy violation.The incident was reported on December 8, 2023, indicating a delay between discovery and public notification. Given the involvement of an external actor and the large number of affected individuals primarily customers the breach aligns with unauthorized access leading to data exfiltration. The lack of reported ransomware or immediate operational disruption narrows the focus to customer data compromise, though the long-term repercussions (e.g., identity theft, fraud) remain a risk.The breach underscores vulnerabilities in Red Roof Inns’ cybersecurity defenses, particularly against targeted external attacks. No evidence suggests the attack threatened the company’s existence or broader infrastructure, but the leak of personal customer data warrants severe classification under data protection frameworks.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8a9ff5c2-9ff4-4f8e-bbdf-987d931364c5.shtml

TPRM report: https://www.rankiteo.com/company/red-roof

"id": "red032090625",
"linkid": "red-roof",
"type": "Breach",
"date": "9/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 27327,
                        'industry': 'Hotel/Lodging',
                        'location': 'United States',
                        'name': 'Red Roof Inns, Inc.',
                        'type': 'Hospitality'},
                       {'customers_affected': 11,
                        'location': 'Maine, United States',
                        'name': 'Maine Residents',
                        'type': 'Individuals'}],
 'attack_vector': 'External Hacking',
 'data_breach': {'number_of_records_exposed': 27327,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'date_publicly_disclosed': '2023-12-08',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach incident involving Red Roof Inns, Inc. The breach '
                'occurred between September 21 and September 23, 2023, and was '
                'identified as an external hacking incident affecting 27,327 '
                'individuals, including personal information of 11 Maine '
                'residents.',
 'impact': {'data_compromised': ['Personal Information'],
            'identity_theft_risk': 'High (Personal Information Exposed)'},
 'references': [{'date_accessed': '2023-12-08',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Red Roof Inns, Inc. Data Breach (2023)',
 'type': 'Data Breach'}