On February 19, 2025, Resort Data Processing (RDP) experienced a data breach reported by the Maine Attorney General's Office on May 14, 2025. The incident involved unauthorized access to a customer-facing website, compromising the personal and financial information of approximately 5,007 individuals, including 44 Maine residents. The exposed data included names and payment card details, though Social Security numbers were not affected. The breach highlights vulnerabilities in RDP’s web security, leading to potential financial fraud risks for affected customers. While no highly sensitive data (e.g., SSNs) was stolen, the exposure of payment card information poses reputational harm and financial liability for the company. Customers may face fraudulent transactions, and RDP could incur regulatory penalties, legal costs, and loss of trust. The incident underscores the need for stronger access controls and monitoring to prevent similar breaches in the future.

The Washington State Office of the Attorney General reported a data breach involving Resort Data Processing, Inc. on October 27, 2023. The breach, discovered on August 21, 2023, involved a SQL injection vulnerability affecting the personal information of 2,319 Washington residents, including names, mailing addresses, email addresses, and credit card information. The breach occurred from August 2022 to August 23, 2023.

The Maine Office of the Attorney General reported that Resort Data Processing, Inc. experienced a data breach due to malicious code from hackers, affecting 9,790 individuals, including 148 residents. The breach occurred between February 22, 2021, and June 14, 2021, and involved the compromise of payment card information. The incident was reported on July 14, 2021.

The California Office of the Attorney General reported on July 22, 2021, that Resort Data Processing, Inc. experienced a cybersecurity attack on its online booking system affecting personal information, including names and credit/debit card numbers of customers. The breach dates of compromised information were identified between January 1, 2019, February 22, 2021, and June 14, 2021.