Interstate Management Company, LLC, a hotel management firm, reported an external system hacking incident that occurred between November 19, 2025, and November 22, 2025. The company discovered this activity on April 23, 2026, and began sending written notices to affected individuals on May 26, 2026. The company stated that it secured its systems, launched a forensic investigation, and notified law enforcement.
Approximately 22,743 individuals were affected by this data breach. The incident may have involved names, Social Security numbers, dates of birth, addresses, government IDs, medical information, financial account information, and health insurance information. The company has filed disclosures with the Attorney General offices in Maine, California, Indiana, and Vermont.
While the company has confirmed unauthorized access, specific details regarding any deeper impact remain unclear, and further information may be released as investigations continue. Notices are being sent to affected individuals, and the company is offering free credit monitoring and identity protection.