DisclosureLens
HackingHospitalityHospitalityCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumContained

Red Roof Inns

bd_9895dc46dfcf4eed · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 23, 2023

Filed

Dec 8, 2023

To disclose

11 weeks

Affected · nationwide

27,32711 in this filing

Linked

4 filings

Confidence

50%
Full breach record for Red Roof Inns →3 incidents on file

Red Roof Inns, Inc. reported an external system breach that occurred between September 21, 2023, and September 23, 2023. The breach was discovered on September 23, 2023. The incident affected 11 Maine residents, part of a larger group of 27,327 individuals. The compromised data included names combined with financial account or credit/debit card numbers and their associated security codes or PINs. Red Roof Inns began notifying affected individuals on December 8, 2023, and offered 24 months of identity theft protection and credit monitoring services through IDX.

Maine clockDiscovered Sep 23, 2023 → Filed with AG Dec 8, 202376d ⏱ ME AG >30d11 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2 days
discovery → filing · 11 weeks / 76 days

Sep 21, 2023

Begins

Sep 23, 2023

Discovered

Dec 8, 2023

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Massachusetts State AGDec 8 · first
Vermont State AGDec 8 · first
Montana State AGDec 8 · first
Maine State AGDec 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.