Clustered 7 filings across 7 jurisdictions · filing window Jan 14, 2026 → Feb 20, 2026. View entity profile → Other incidents for this victim →
incident inc_cfbc4377ea484341 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
PII · Government ID
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA IN ME NH OR TX VT
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Jan 14, 2026
When the intrusion reportedly occurred, per the linked filings
Jan 14, 2026
Reported by CALIFORNIA AG, NEW HAMPSHIRE AG, OREGON AG, VERMONT AG filings
Choice Hotels International, Inc. reported a data breach on January 14, 2026, where an external actor used social engineering to bypass multifactor authentication and access an application containing franchisee and applicant records. The incident involved names and Social Security numbers. Access was shut down within an hour. The company notified law enforcement and is offering two years of credit monitoring.
Jan 26, 2026
Reported by MAINE AG, TEXAS AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
On Jan 14, 2026, an external actor used social engineering to bypass MFA and access a Choice Hotels app holding franchisee/applicant records. Access was shut down within an hour. Investigation concluded Jan 26, 2026: names, SSNs, DOBs, and contact info of 66 Maine residents were exposed. Law enforcement notified. Two years of Epiq credit monitoring offered to affected individuals.
Affected (this filing): 66
Choice Hotels International Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-01-14 and was reported on 2026-02-19. 511 Indiana residents were affected. 24,115 individuals affected in total.
Affected (this filing): 24,115
Choice Hotels International, Inc. notified the New Hampshire Attorney General of a data security incident occurring on January 14, 2026. An external actor used social engineering (phishing) to bypass multifactor authentication and access an application containing franchisee and applicant records. The breach affected 67 New Hampshire residents, exposing names, Social Security numbers, dates of birth, and contact information. Choice Hotels contained the breach within an hour, notified law enforcement, and began mailing notifications on February 19, 2026, offering two years of credit monitoring.
Affected (this filing): 67
Choice Hotels International, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-02-19. The breach occurred during 1/14/2026 - 1/14/2026. The breach was discovered on 1/14/2026. 24,115 individuals were affected. Notice was sent on 2/19/2026.
Affected (this filing): 24,115
Choice Hotels International, Inc. disclosed a data breach where an external actor used social engineering (phishing) to bypass MFA and gain unauthorized access to an application containing franchisee and applicant records on January 14, 2026. The incident exposed names, contact info, SSNs, and DOBs. Choice Hotels contained the breach within an hour, notified law enforcement, enhanced application access controls, and provided two years of credit monitoring to affected individuals.
Choice Hotels International, Inc. based in North Bethesda, Maryland, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-01-26 and reported on 2026-02-20. 2,559 Texas residents were affected. 24,115 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information. Consumers were notified via U.S. Mail.
Affected (this filing): 2,559