Resort Data Processing Data Breach Details
The data breach occurred between December 25, 2024, and January 22, 2025, when an unauthorized actor exploited compromised vendor credentials to scrape sensitive information. RDP discovered that the unauthorized party had accessed and extracted data entered by consumers during the online reservation process. Upon identifying the breach, RDP took immediate action to stop the unauthorized activity and engaged a forensic firm to investigate the incident and determine which data may have been affected.
Following the investigation, RDP determined that personal information of different individuals was impacted including one New Hampshire resident. The compromised data could include sensitive details such as names, contact information, payment information, and possibly other reservation-related data.
As a precautionary measure, RDP is offering affected individuals one year of complimentary credit monitoring and identity restoration services through Kroll, its trusted third-party vendor. Affected individuals are encouraged to enroll in these services by the specified deadline to take full advantage of this offer.
What Information Was Compromised?
The compromised data may include:
- Full Name
- Social Security Number
- Financial Information
- Email address