Hotel Vermont, a hospitality company, reported a data breach affecting 7 Maine residents. The breach occurred when an employee's credentials for a third-party online reservation service, TravelClick, were compromised through a phishing email on January 21, 2021. A cybercriminal, posing as a TravelClick representative, used the stolen credentials to access guest reservation information within TravelClick's database. The breach was discovered on March 11, 2021, and affected individuals were notified on April 6, 2021.
Affected (this filing): 7