2026 Maine Course Hospitality — Qilin claim; VT AG notice (≥553 VT; SSNs/PHI)
Data compromised
Per ClaimDepot / AG-facing summaries: government ID numbers, Social Security numbers, and health records (varies by individual). VT AG floor ≥553 residents; national total not published in sources reviewed
Technical writeup
Verified regulator/consumer-notice chain — ClaimDepot (Aug 3, 2026) and class-action trackers cite Vermont Attorney General security-breach materials dated around July 31, 2026 for Maine Course Hospitality Group (Freeport, ME hotel operator). Qilin listed the company on Tor around November 5, 2025. Confirmed exposed categories in public summaries include government IDs, Social Security numbers, and health records. At least 553 Vermont residents are reflected in AG-facing tallies; nationwide headcount not disclosed in sources reviewed — recordsAffected 553 is the Vermont floor. Complimentary protective services may accompany mailed notices.
Root cause
Qilin ransomware/extortion listing (Nov 5, 2025) followed by state AG consumer notice (VT AG July 31, 2026)