Data Breach at Historic Thayer Hotel Exposes Over 33,000 Customer Records

The Thayer Hotel, a landmark property near the prestigious West Point Military Academy, has suffered a data breach that exposed personal information of more than 33,000 individuals, including ID document details.

According to a notice sent to affected guests, the hotel detected unauthorized access to its systems in late September. Once the breach was discovered, the IT team worked for several days to restore system access and immediately launched an investigation with the help of third-party cybersecurity experts and forensic specialists.

By October 17, investigators had identified the individuals whose data may have been compromised. Notification letters were sent out two weeks later. The exposed information includes names paired with identification details such as driver’s license numbers, passport numbers, or state ID card numbers. A small number of individuals also had their Social Security numbers (SSNs) exposed.

In a filing with the Maine Attorney General’s Office, The Thayer Hotel confirmed that the incident affected more than 33,000 people. The hotel stated that there is currently no evidence of misuse of the compromised data.

“We take this incident very seriously,” the hotel said in its statement. “We are notifying affected individuals and providing resources to help protect their information.” Impacted guests are being offered 12 months of complimentary identity theft protection services.

Cybersecurity experts warn that exposed identification documents can be used for identity theft or fraudulent account creation. Given the hotel’s proximity to the U.S. Military Academy, the breach raises additional security concerns, as many guests are military personnel or their family members.

The Thayer Hotel, established in the 1920s under the leadership of Brigadier General Douglas MacArthur, has long been associated with West Point’s heritage and frequently hosts military guests and dignitaries.

Authorities continue to monitor the situation as the hotel works to strengthen its cybersecurity defenses and prevent future incidents.