UnknownHospitalityHospitalityCustomer Data InvolvedIdentity (basic)LowContained

Interstate Management Company, LLC

bd_604a38f9d0f90394 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 23, 2026

Filed

May 26, 2026

To disclose

5 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for Interstate Management Company, LLC →

Interstate Management Company, LLC (operator of The Westin San Diego Bayview) notified the California AG of an incident where personal information (name and other data) may have been accessed from hotel systems between Nov 19-22, 2025. The company confirmed the access on April 23, 2026. Systems were secured, law enforcement notified, and credit monitoring offered. No specific attack vector or malware was identified.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 155 days

discovery → filing · 5 weeks / 33 days

Nov 19, 2025

Begins

Apr 23, 2026

Discovered

May 26, 2026

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_76511e81864b77022026-05-26Candidate
Maine State AGbd_c3abfae1f8e44f332026-05-26Verified
Indiana State AGbd_ccb9a19feee546fa2026-05-26Verified
Vermont State AGbd_f15b1d2268e818fe2026-05-26Verified

Show 2 more filings ↓up to 2d gap

Nebraska State AGbd_f3721a55df207f3f2026-05-26Verified
Texas State AGbd_6b1874efb28835fc2026-05-28 · +2dVerified by operator

Name: Interstate Management Company, LLC
norm: interstate management

Name: Interstate Management Company, LLC
norm: interstate management
Industry: Hospitalityllm

Discovered: Apr 23, 2026
Breach occurred: Nov 19, 2025 – Nov 22, 2025
Undetected for: 155 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 26, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
Regulator citations: Notified law enforcement

During the incident: Took steps to secure systems
Investigated what happened
Identified the data that may be involved
Reviewed the information involved to identify the types of information within the files and to whom that information may relate
Confirmed the security of its systems
Notified law enforcement
Providing you with access to credit monitoring services for 12/24 months at no cost to you through IDX
Changes made: Continue to evaluate our policies and procedures related to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Massachusetts State AGMay 26 · first

Maine State AGMay 26 · first

Indiana State AGMay 26 · first

Vermont State AGMay 26 · first

Nebraska State AGMay 26 · first

California State AGMay 26 · first · this page

Texas State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-623968
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2026
Raw hash: 92ce67d965ada1b42d870f65902059d8450b15059e0b38c7587cedf90adddfbc

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityInterstate Management Company, LLC

Victim entityInterstate Management Company, LLC

Incidentdiscovered Apr 23, 2026

Stated responseTook steps to secure systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov