JC Resorts LLC, a family-owned hospitality company headquartered in La Jolla, California, experienced a data breach that was discovered on January 19, 2026. An unauthorized party gained access to files on the company's network. The company confirmed that a review of the affected data was conducted, identifying the individuals and information types involved.
The breach affected approximately 5,942 individuals nationwide. The compromised data types include names, Social Security numbers, dates of birth, addresses, government IDs, medical information, and financial information. Notifications were sent to regulatory bodies in California, Indiana, Maine, Massachusetts, and Nebraska on April 28, 2026, the same day consumers were notified via mail. The full extent of all potential data types impacted has not been publicly disclosed.
It is important to note that additional details about the breach may emerge over time, and consumers may receive delayed notifications.