CHOICE HOTELS INTERNATIONAL INC /DE

Choice Hotels International, Inc. based in North Bethesda, Maryland, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-01-26 and reported on 2026-02-20. 2,559 Texas residents were affected. 24,115 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information. Consumers were notified via U.S. Mail.

Choice Hotels International, Inc. reported a data breach affecting 66 Maine residents. On January 14, 2026, an external actor used social engineering to gain unauthorized access to an application containing franchisee records, bypassing MFA. The breach was contained within an hour. Affected data included names, contact info, SSNs, and DOBs. Notifications were sent on February 19, 2026, with two years of credit monitoring offered.

Choice Hotels International Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-01-14 and was reported on 2026-02-19. 511 Indiana residents were affected. 24,115 individuals affected in total.

Choice Hotels International, Inc. notified the NH Attorney General of a data security incident where a skilled person used social engineering to gain unauthorized access to an application containing franchisee and applicant records on January 14, 2026. Access was shut down within an hour. The incident affected 67 New Hampshire residents, exposing names, contact information, Social Security numbers, and dates of birth. Choice Hotels is offering two years of credit monitoring and has implemented additional access restrictions and security training.

Choice Hotels International, Inc. reported a data breach affecting 198 Nebraska residents. On January 14, 2026, an external actor used social engineering (phishing) to gain unauthorized access to an application containing franchisee records, bypassing MFA. The breach exposed names, contact info, SSNs, and DOBs. Choice Hotels detected the access within an hour, shut it down, notified law enforcement, and began mailing notifications on February 19, 2026, offering two years of credit monitoring.

Choice Hotels International, Inc. reported a data breach on January 14, 2026, where an external actor used social engineering to bypass multifactor authentication and access an application containing franchisee and applicant records. The incident involved names and Social Security numbers. Access was shut down within an hour. The company notified law enforcement and is offering two years of credit monitoring.

Choice Hotels International, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2026-02-19. 269 Massachusetts residents were affected.

Choice Hotels International, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-02-19. The breach occurred during 1/14/2026 - 1/14/2026. The breach was discovered on 1/14/2026. 24,115 individuals were affected. Notice was sent on 2/19/2026.

Choice Hotels International, Inc. reported a data security incident on January 14, 2026, where a skilled person used social engineering to gain access to an application containing franchisee and applicant records. The attacker bypassed multifactor authentication (MFA). Access was shut down within an hour. Affected data included names, contact information, Social Security numbers, and dates of birth. The company notified law enforcement and is offering two years of credit monitoring.

CHOICE HOTELS INTERNATIONAL, INC. filed a data-breach notice with the Illinois Attorney General in February 2026 (case 26-02-978). The register records the breach as discovered on January 26, 2026. Personal information types reported: ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Choice Hotels International disclosed an inadvertent data exposure affecting approximately 88,000 individuals between June 2015 and November 2019. A technical misconfiguration involving Safari browser crashes caused reservation data (names, emails, payment card details) to be exposed to third-party tracking vendors via URL parameters. Choice Hotels patched the code and requested data deletion from third parties.

Choice Hotels International disclosed a technical misconfiguration where Safari browser crashes on its reservation page inadvertently exposed guest PII (names, emails, payment card details) to third-party tracking vendors. The issue occurred ~88,000 times between June 2015 and Nov 2019. Choice identified the root cause, patched the code, and notified affected guests.

Choice Hotels International, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2019-11-29. The breach occurred during 6/1/2015 - 11/12/2019. The breach was discovered on 11/12/2019. 88,295 individuals were affected. Notice was sent on 11/29/2019.

Choice Hotels International, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-11-29. 1,104 Massachusetts residents were affected. The report records the breach type as electronic.

Choice Hotels International disclosed an inadvertent data exposure affecting approximately 88,000 guests between June 2015 and November 2019. A technical issue with the Safari web browser caused reservation data (name, email, payment card number, expiration date, and potentially CVV) to be included in website URLs, which were then sent to third-party tracking services. The issue was identified and resolved on November 12, 2019, by modifying website code. Third parties were contacted to delete the data.

Choice Hotels International, Inc. notified guests of an inadvertent disclosure of reservation data (names, emails, payment card details) to third-party tracking vendors. The issue stemmed from a Safari browser crash bug that exposed typed form data in the URL bar. The incident affected approximately 88,000 individuals between June 2015 and November 2019. Choice Hotels fixed the website code and requested data deletion from third parties.

Choice Hotels International disclosed an inadvertent disclosure of guest data to third-party tracking vendors. Due to a Safari browser crash bug, data entered on reservation pages (names, emails, payment card numbers, CVVs) was appended to URLs and sent to trackers. The incident affected approx. 88,000 individuals from June 2015 to Nov 2019. Choice identified 1,684 Washington residents for direct notice and issued a press release for earlier unidentifiable cases.

Choice Hotels International reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-04-30. 422 Massachusetts residents were affected. The report records the breach type as paper.

California Attorney General's Office breach notification report for Choice Hotels International. The filing is a sample notification form (SB24) and does not contain specific details regarding the incident type, data affected, or number of individuals impacted.

Choice Hotels International notified the NH AG of a database misconfiguration where sensitive guest data (SSN, credit card, driver's license) was inadvertently printed on mail envelopes. Discovered late Dec 2011. ~59 NH residents affected. No evidence of misuse. Credit monitoring offered.