Interstate Management Company Data Breach Exposes Sensitive Information of 22,743 Individuals Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving Interstate Management Company, LLC, a hotel management firm operating under Aimbridge Hospitality. The breach, confirmed on April 23, 2026, involved unauthorized access to hotel systems between November 19 and November 22, 2025. Interstate Management Company, headquartered in Arlington, VA, manages branded and independent hotels, resorts, and convention centers across the U.S. and internationally. Following a 2019 merger with Aimbridge Hospitality, it became part of one of the world’s largest third-party hotel management companies, with corporate operations based in Plano, Texas. The breach exposed sensitive data, including: - Names - Social Security numbers - Financial account information Affected individuals 22,743 in total were notified via written notice on May 26, 2026. Legal representatives are now reviewing potential compensation claims for those impacted.

The California Office of the Attorney General reported that Aimbridge Hospitality Holdings, LLC experienced a data breach involving unauthorized access to employee email accounts due to a phishing incident between June 7, 2018, and September 24, 2018. Approximately 17,381 California residents were affected, and the compromised information included names, Social Security numbers, financial account numbers, and/or Driver’s License numbers. On January 2, 2019, Aimbridge reported the breach and outlined steps taken to enhance security.