Aimbridge Hospitality Holdings

Disclosed Jun 7, 20188 years ago120,573 affectedConfirmed

What is known

People affected	120,573 (as reported by the organization)
Disclosed	Jun 7, 2018
Discovered	Sep 14, 2018
Happened	Jun 7, 2018
Attack	Phishing
Data exposed	Names, Social Security numbers, Government IDs, Payment cards, Financial
Sector	Healthcare · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Aimbridge Hospitality Holdingsoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: Aimbridge Hospitality Holdingsatg.wa.gov · Official notice	Official notice
Oregon DOJ breach notice: Aimbridge Hospitality Holdingsjustice.oregon.gov · Official notice	Official notice
Indiana Attorney General 2019 data breach report: Aimbridge Hospitality Holdingsin.gov · Official notice	Official notice
Indiana Attorney General 2018 data breach report: Aimbridge Hospitality Holdingsin.gov · Official notice	Official notice
Maine Attorney General breach notice archive: Aimbridge Hospitality Holdingsmaine.gov · Official notice	Official notice
Maine Attorney General breach notice archive: Aimbridge Hospitality Holdingsmaine.gov · Official notice	Official notice

Where	Filed	People
California AGresidents of CA	Jun 7, 2018
Indiana AGresidents of IN	Jun 7, 2018	1,129
Maine AGresidents of ME	Jun 7, 2018	16
Washington AGresidents of WA	Dec 31, 2018	647
Oregon DOJresidents of OR	Dec 31, 2018	120,573
Indiana AGresidents of IN	Dec 31, 2018	1,989
Maine AGresidents of ME	Dec 31, 2018	30
California AGresidents of CA	Jan 2, 2019

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Aug 24, 2017Aug 24, 20179 years ago	Aug 24, 20179 years ago	Not stated	Healthcare	Confirmed	15K

History of this record

2026-09-25 · source: empty to https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%2012-6-2018%20through%209-14-2020%20REDACTED.xlsx · backfill source
2026-09-25 · data_types: ["names","ssn"] to ["names","ssn","government-id","payment-card","financial"] · backfill source
2026-09-25 · data_types: [] to ["names","ssn"] · backfill source
2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2018.pdf · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 120573 · backfill source
2026-09-25 · attack: unknown to phishing · backfill source
2026-09-25 · discovered: empty to 2018-09-14 · backfill source
2026-09-25 · disclosed: 2019-01-02 to 2018-06-07 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.