Direct Travel, Inc.

Direct Travel, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-10-19. 52 Massachusetts residents were affected. The report records the breach type as electronic.

Direct Travel, Inc. notified Montana residents of a data security incident involving its cloud-service-provider on April 28, 2021. An unauthorized individual may have acquired customer personal information, including dates of birth and passport numbers. Direct Travel engaged forensic experts and is offering 12 months of complimentary identity monitoring through TransUnion.

Direct Travel, Inc. notified the New Hampshire Attorney General of a data security incident involving its cloud-service-provider. On April 28, 2021, an unauthorized individual acquired some of Direct Travel's data. The incident affected 4 New Hampshire residents, exposing dates of birth and/or passport numbers. Direct Travel retained forensic experts, enhanced network security, increased password complexity, and offered 12 months of complimentary identity monitoring via TransUnion. Notification letters were mailed on October 18, 2021.

Direct Travel, Inc. experienced a ransomware incident on April 28, 2021, which was also the date of discovery. The breach affected 1,510 individuals in total, including 10 residents of Maine. Affected individuals were notified on October 18, 2021, and offered 12 months of identity monitoring services through Transunion.