Date of Breach: Report submitted to HHS on October 9, 2026; incident date not disclosed
Not publicly disclosed; the HHS listing names no data types
Were you recently affected by a data breach?
Were you recently affected by a data breach?
Not publicly disclosed; the HHS listing names no data types
Not disclosed; categories of data involved have not been confirmed
Claimed: loyalty program records, traveler profiles, account records with password-like tokens, booking records (unconfirmed)
Claimed: shopper activity logs with IP addresses, chat transcripts with phone numbers, employee directory, a small number of Social Security numbers with dates of birth (unconfirmed)
Not disclosed; categories of data involved have not been confirmed
Not disclosed in the Indiana Attorney General filing (see your own notice letter for the items that apply to you)
Varies by provider: reported items include names, dates of birth, Social Security numbers, medical information and health insurance information (see your own notice letter for the items that apply to you)
Name and Social Security number
Not listed in the publicly posted notice letter (see your own notice letter for the items that apply to you)