First Call Hospitality Data Breach

First Call Hospitality, a North Dakota-based hotel management company that operates locations across multiple states, may have experienced a data breach after a hacker group calling itself Settra claimed to have compromised the company’s systems. Companies entrusted with employee and guest information have a responsibility to keep that data secure, and when a breach is even suspected, the people whose information may be at risk deserve a clear, timely explanation of what happened.

First Call Hospitality’s Data Breach Investigation

Attorneys are looking into whether a class action lawsuit can be filed on behalf of individuals affected by the suspected First Call Hospitality data breach. The investigation was prompted by a September 17, 2026 post on the dark web monitoring site Ransomware.live, which identified the hacker group Settra as the party behind the suspected attack. Breachsense, a separate dark web security monitoring service, similarly reported that Settra claimed responsibility for an attack on First Call Hospitality.

As of this writing, First Call Hospitality has not publicly confirmed a breach occurred, and the exact scope of the incident, including what data may have been exposed, has not been disclosed. Ransomware attacks on companies that manage sensitive employee and business records are increasingly common across the hospitality sector, where centralized management companies often hold records for staff and operations across many individual hotel properties, making a single point of compromise potentially far-reaching. When a ransomware group claims responsibility for an attack before a company has issued its own notification, there can be a lag between the initial claim and any official confirmation or notice to affected individuals, which is why attorneys are working now to identify people who may have been affected.

Attorneys investigating this matter want to hear from anyone affiliated with First Call Hospitality, including current and former employees and the staff of the hotels it manages, who is concerned their information could have been exposed.

When Did This Breach Occur?

Ransomware.live reported that the suspected attack occurred on approximately August 31, 2026, with the claim becoming public on September 17, 2026. First Call Hospitality has not issued its own confirmed timeline of the incident, including when it may have first detected any unauthorized activity or when it might notify affected individuals.

What Information Was Breached?

The specific categories of information involved in the suspected breach have not yet been publicly disclosed by First Call Hospitality, Ransomware.live, or Breachsense. Attorneys are working to determine what personal information, potentially including data belonging to employees and hotel staff, may have been accessed or stolen.

What You Can Do

If you are a current or former employee of First Call Hospitality, or work at one of the hotels it manages, and are concerned your information may have been exposed, there are steps you can take while more information becomes available:

• Monitor your financial accounts and credit reports for any unfamiliar activity
• Be cautious of unexpected calls, texts, or emails claiming to be from First Call Hospitality or related parties
• Consider placing a fraud alert or credit freeze with the major credit bureaus
• Keep any notification you receive from First Call Hospitality for your records

File a Data Breach Lawsuit Against First Call Hospitality

If you believe your personal information may have been exposed as a result of this suspected breach, you may have legal options. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.