On January 19, 2022, Kanuga Conference Center fell victim to a ransomware attack, compromising the personal data of 1,971 individuals, including one Maine resident. The exposed information included first and last names and Social Security numbers, though no evidence of identity theft or financial fraud was reported. The incident was disclosed by the Maine Office of the Attorney General on March 4, 2022. While the attack did not result in confirmed misuse of the stolen data, the exposure of sensitive personally identifiable information (PII)—particularly Social Security numbers—poses a significant long-term risk for affected individuals, including potential identity theft, phishing, or fraudulent activity. The organization likely faced operational disruptions, reputational damage, and regulatory scrutiny due to the breach. The lack of confirmed fraud does not mitigate the severity, as the unauthorized access to highly sensitive data alone constitutes a major security failure with lasting consequences for both the company and the impacted individuals.