HackingOtherCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Inca Floats

bd_db3136e3051410ea · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 24, 2024

Filed

Apr 23, 2026

To disclose

—

Affected

12state residents only

Linked

5 filings

Confidence

67%

Full breach record for Inca Floats →

Inca Floats, Inc. (dba Integrity Galapagos) detected an unauthorized third-party attempt to infiltrate its network on November 24, 2024. The company patched servers, deactivated accounts, and launched an investigation. While no data exfiltration was confirmed, 12 Maryland residents were notified out of caution due to potential exposure of names, addresses, dates of birth, and passport numbers. This is a supplemental notification regarding travel partner-affiliated individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 24, 2024

Discovered

Apr 23, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_5c074a411cc4b47a2025-03-21 · +398dVerified
New Hampshire State AGbd_05de7c13f9f2aa242025-01-21 · +457dVerified
Maine State AGbd_9fef5edf8df5518a2025-01-21 · +457dCandidate
Montana State AGbd_b2251ef4755d1f852025-01-21 · +457dVerified

Name: Inca Floats, Inc., dba International Nature & Cultural Adventures, and dba Integrity Galapagos
norm: inca floats

Name: Inca Floats
norm: inca floats
Also named: Inca Floats, Inc.dba oflegal entity
International Nature & Cultural Adventuresdba oftrade name
Integrity Galapagosdba oftrade name
Industry: Otherllm

Discovered: Nov 24, 2024
Materiality determined: —
Notification sent: Mar 17, 2025
Affected individuals: 12state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Submitted original notification letter to the Maryland Attorney General on January 21, 2025Submitted supplemental notification letter to the Maryland Attorney General on March 18, 2025

During the incident: Patching the server
Deactivating compromised accounts
Changing passwords
Launched an investigation into the incident
Conducting an investigation with the assistance of outside counsel
Initiate a response plan
Changes made: Reviewed its policies and procedures relating to the security of its systems and information life cycle management
Enhanced its network security measures
Offering 12 months of credit monitoring and identity theft protection through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

New Hampshire State AGJan 21 · first

Maine State AGJan 21 · first

Montana State AGJan 21 · first

New Hampshire State AG+59d

Maryland State AG+457d · this page

Pattern: first filing Jan 21 (NH), last Apr 23 (MD) — a 457-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376220%20%281%29.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: 3f183b7b1d1b014633e517ab6dec8e1bd8c8994c0216ad8cb226697ee7e8f2fc

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityInca Floats, Inc., dba International Nature & Cultural Adventures, and dba Integrity Galapagos

Victim entityInca Floats

Incidentdiscovered Nov 24, 2024

Stated responsePatching the server

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov