A data breach at Summit Hotel Properties, a publicly traded real estate investment trust, resulted in the unauthorized access and exfiltration of personally identifiable information (PII) from its corporate systems. The breach was detected on October 5, 2025, by a managed service provider, and containment was achieved by October 6, 2025. The stolen data, later disclosed on the dark web by the threat actor 'Worldleaks' on October 24, 2025, included sensitive details such as names, addresses, phone numbers, email addresses, and Social Security numbers.The exposure of PII poses significant risks, including identity theft and financial fraud, for at least one confirmed individual in New Hampshire, though the full scope remains under investigation. Summit Hotel Properties conducted a review by October 26, 2025, and reported the incident to the New Hampshire Attorney General’s office on November 21, 2025. Affected individuals were notified via mail and offered two years of free identity monitoring through Kroll. The breach underscores vulnerabilities in data security, with potential long-term reputational and financial repercussions for the company.