HackingHospitalityData ExfiltratedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Army Navy Country Club
bd_fa0b6d1885059eec · schema v1 · pii pii-v1
Full breach record for Army Navy Country Club →Army Navy Country Club (ANCC), a private country club in Virginia, discovered a network disruption on October 8, 2024 and determined that files were acquired without authorization on or about October 6, 2024. A review concluded on November 21, 2024 that personal information of current and former employees—including name, address, and Social Security number—was affected. ANCC notified 150 Maryland residents on January 2, 2025 and offered 12 months of IDX identity protection.
Maryland clock✗ MD AG >90d20 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed150 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376115.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2026
- Raw hash
- 4f3119a86434736868a71834ec47a3b7b418f36f2f920c612699cdfe8889936b
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Army Navy Country Clubnorm: army navy country club
- Industry
- Hospitalityllm
Incident
- Discovered
- Oct 8, 2024
- Materiality determined
- Nov 21, 2024
- Notification sent
- Jan 2, 2025
- Affected individuals
- 150
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notice provided to Maryland Office of the Attorney General under Maryland's data breach notification statuteWritten notice being provided to relevant state regulators (VA, MD, NY, NC, RI, CA, OR, DC)
Compliance
- Time to disclose
- 20 months(588 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.