First Meridian Services Data Breach Exposes Sensitive Personal Information
A data breach at First Meridian Services, Inc. a U.S.-based human resources and hospitality company operating under Skyport Hospitality has exposed sensitive personal information of affected individuals. The company, headquartered in Greenwood Village, Colorado, manages food and beverage services at major airports, including Denver International Airport.
Incident Timeline & Investigation
On September 5, 2025, First Meridian detected suspicious activity within its network. The company engaged outside legal counsel and cybersecurity experts to investigate, confirming that an unauthorized third party accessed a portion of its systems for several days in early September and exfiltrated files from internal shares.
A data-review firm was brought in to analyze the compromised files, completing its assessment by December 10, 2025. Affected individuals began receiving notification letters on February 10, 2026, and the breach was disclosed to the New Hampshire Attorney General.
Exposed Data
The breach compromised sensitive personal information, including:
- Social Security numbers
- Driver’s license numbers
Legal Response
Class action law firm Shamis & Gentile P.A. is investigating the incident, with affected individuals potentially eligible for compensation. The firm is assisting those impacted in understanding their rights and pursuing claims related to the breach.
Source: https://www.claimdepot.com/investigations/first-meridian-services-data-breach-2026
Skyport Hospitality cybersecurity rating report: https://www.rankiteo.com/company/skyport-hospitality
"id": "SKY1770681425",
"linkid": "skyport-hospitality",
"type": "Breach",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Hospitality, Food and Beverage Services',
'location': 'Greenwood Village, Colorado, USA',
'name': 'First Meridian Services, Inc.',
'type': 'Human resources and hospitality company'}],
'customer_advisories': 'Notification letters sent to affected individuals on '
'February 10, 2026',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': 'Social Security '
'numbers, driver’s '
'license numbers',
'sensitivity_of_data': 'High (Social Security numbers, '
'driver’s license numbers)',
'type_of_data_compromised': 'Personal Identifiable '
'Information (PII)'},
'date_detected': '2025-09-05',
'date_publicly_disclosed': '2026-02-10',
'description': 'A data breach at First Meridian Services, Inc., a U.S.-based '
'human resources and hospitality company operating under '
'Skyport Hospitality, has exposed sensitive personal '
'information of affected individuals. The company manages food '
'and beverage services at major airports, including Denver '
'International Airport. The breach compromised Social Security '
'numbers and driver’s license numbers.',
'impact': {'data_compromised': 'Sensitive personal information, including '
'Social Security numbers and driver’s license '
'numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuits',
'systems_affected': 'Internal shares'},
'investigation_status': 'Completed',
'references': [{'source': 'New Hampshire Attorney General'},
{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Disclosed to New Hampshire '
'Attorney General, potential class '
'action lawsuits',
'regulatory_notifications': 'New Hampshire Attorney '
'General'},
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals',
'incident_response_plan_activated': True,
'third_party_assistance': 'Outside legal counsel and '
'cybersecurity experts, data-review '
'firm'},
'threat_actor': 'Unauthorized third party',
'title': 'First Meridian Services Data Breach Exposes Sensitive Personal '
'Information',
'type': 'Data Breach'}