HackingOtherCustomer Data InvolvedPIILowResolved
Ashford Inc.
bd_875283a68f2707bc · schema v1 · pii pii-v1
Full breach record for Ashford Inc. →Ashford, Inc. (Dallas, TX) filed a supplemental notice with the Maine AG on March 19, 2025, correcting a prior January 19, 2024 submission. The original incident was an external system breach (hacking) that occurred on September 7, 2023, discovered September 20, 2023. The correction updates the total affected individuals from 46,906 to 48,459; 7 Maine residents were affected. IDX credit monitoring and identity restoration services (24 months) were offered.
Maine clockDiscovered Sep 20, 2023 → Filed with AG Apr 18, 2025576d ✗ ME AG >90d19 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e64cdef0-9756-4455-999c-7e87df53f58c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2025
- Raw hash
- 7007eaeb8127eefba7fe806c222c9216ed9fce82792ccf393f14a72091606a6b
Reporting entity
- Name
- Ashford Inc.norm: ashford
- Domain
- ashfordinc.com
- Industry
- Hospitality / Hotel Management
Victim entity
- Name
- Ashford Inc.norm: ashford
- Domain
- ashfordinc.com
- Industry
- Hospitality / Hotel Management
- Industry
- Otherllm
Incident
- Discovered
- Sep 20, 2023
- Materiality determined
- —
- Notification sent
- Jan 19, 2024
- Affected individuals
- 7
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Supplemental notice filed with Maine AG on 2025-03-19 to correct total affected count from 46,906 to 48,459
Compliance
- Time to disclose
- 19 months(576 days from discovery to filing)
- Compliance flags
- ME AG >90d · 576dME resident >60d · 121d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 20, 2023→ Filed with AG: Apr 18, 2025576d 90 days ME AG >90d Maine Discovered: Sep 20, 2023→ Notified: Jan 19, 2024121d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.