Where does the Hilton Grand Vacations case file come from?

Every entry is taken from the breach report Hilton Grand Vacations lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Hilton Grand Vacations Data Breach

This file collects the dated facts on record for the Hilton Grand Vacations incident. The state report is dated February 20, 2026.

Timeline

February 20, 2026Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: February 20, 2026
Receiving office: Massachusetts Attorney General

Case notes

Hilton Grand Vacations has officially reported a data breach to the Massachusetts Attorney General's office. This notification, filed on February 20, 2026, confirms a security incident affecting individuals whose personal information was held by the hospitality company. The breach type was not specified in the public filing.

The incident involved an unauthorized intrusion into Hilton Grand Vacations' digital environment. While the specific categories of data involved were not detailed in the public filing, the breach could have exposed personal information collected to facilitate vacation planning, property management, and guest services. The company is currently investigating the scope and nature of the compromise.

Such incidents carry potential risks for affected individuals. Exposed personal information can be exploited for various malicious purposes, including targeted phishing attempts, other forms of online fraud, and broader identity theft schemes. Those potentially impacted are advised to remain vigilant regarding their personal security.

Individuals who receive official notification from Hilton Grand Vacations should review it carefully for any specific guidance provided. General protective steps include monitoring financial account statements and credit reports for any suspicious or unauthorized activity. It is also wise to be cautious of unsolicited communications requesting personal details, as these could be phishing attempts designed to exploit the breach.

This report is based on information made public through regulatory filings with the Commonwealth of Massachusetts. Hilton Grand Vacations continues to investigate the incident, and further details may emerge as their assessment progresses. The exact number of people affected by this breach was not specified in the public record.

Questions about this case file

Where does the Hilton Grand Vacations case file come from?: Every entry is taken from the breach report Hilton Grand Vacations lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the Hilton Grand Vacations breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files