Date of Breach: Reported by a threat actor in November 2026; not confirmed by the company
Not disclosed; categories of data involved have not been confirmed
Were you recently affected by a data breach?
Were you recently affected by a data breach?
Not disclosed; categories of data involved have not been confirmed
Claimed: loyalty program records, traveler profiles, account records with password-like tokens, booking records (unconfirmed)
Claimed: shopper activity logs with IP addresses, chat transcripts with phone numbers, employee directory, a small number of Social Security numbers with dates of birth (unconfirmed)
Not disclosed; categories of data involved have not been confirmed
Not disclosed in the Indiana Attorney General filing (see your own notice letter for the items that apply to you)
Varies by provider: reported items include names, dates of birth, Social Security numbers, medical information and health insurance information (see your own notice letter for the items that apply to you)
Name and Social Security number
Not listed in the publicly posted notice letter (see your own notice letter for the items that apply to you)
Social Security numbers