Classaction Waterford Hotel Group Data Breach Exposes Sensitive Personal Information
Article Content
- •Waterford Hotel Group reported a data breach affecting sensitive personal information.
- •At least 242 Vermont residents are confirmed affected, with potential nationwide impact.
- •Legal investigations are ongoing to assess the possibility of a class action lawsuit.
The Waterford Hotel Group reported a data breach on September 25, 2026, affecting sensitive information of individuals, including Social Security numbers and financial data. The breach was discovered on May 5, 2026, when suspicious activity was detected in their systems. Affected individuals include at least 242 Vermont residents, with potential nationwide impacts. The breach may have exposed names, driver's license numbers, passport numbers, taxpayer IDs, and health information. Legal investigations are underway to determine if a class action lawsuit can be filed against the company for inadequate cybersecurity measures. The incident has raised concerns about identity theft and financial fraud risks for those affected.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track LMD Holding Company in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed… 
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…