On April 28, 2021, Direct Travel, Inc. experienced a data breach reported by the Maine Office of the Attorney General on October 18, 2021. The incident involved unauthorized access to sensitive personal information, including dates of birth and passport numbers of approximately 1,510 individuals, with 10 Maine residents confirmed among the affected. While the exact method of the breach was not detailed, the exposure of such personally identifiable information (PII) poses risks of identity theft, fraud, or misuse. In response, the company offered 12 months of free identity monitoring services via TransUnion to mitigate potential harm. The breach did not specify whether the data was exfiltrated or merely accessed, but the nature of the compromised information—passport details and birth dates—heightens the severity due to its use in identity verification and financial fraud.