The Maine Office of the Attorney General disclosed a data breach affecting Club Quarters Management Company, LLC between August 17, 2022, and September 2, 2022. Unauthorized actors gained access to the company’s systems and exfiltrated files containing sensitive personal data, including Social Security numbers (SSNs) and financial account information of 2,522 individuals. The breach exposed highly confidential details, posing significant risks of identity theft, financial fraud, and long-term reputational harm to the affected individuals. While the exact method of intrusion remains undisclosed, the incident underscores vulnerabilities in the company’s data security protocols, particularly in safeguarding personally identifiable information (PII). The compromised data’s nature—SSNs and financial records—elevates the severity, as such information is a prime target for cybercriminals engaging in fraudulent activities or secondary attacks. The breach’s discovery and reporting in November 2022 suggest a delayed response, potentially exacerbating the exposure window for malicious exploitation.

On July 12, 2017, the California Office of the Attorney General reported a data breach involving Club Quarters Hotels. The unauthorized access occurred between August 10, 2016, and March 9, 2017, affecting reservation information. The compromised data included names, email addresses, phone numbers, mailing addresses, and payment card information of unknown individuals.