Waterford Hotel Group & LMD Holding Report Data Breach to Indiana

Waterford Hotel Group LLC and LMD Holding, entities involved in hospitality management and real estate, reported a data security incident to the Indiana Attorney General on September 25, 2026. The breach, which was discovered to have occurred on April 2, 2026, is currently under monitoring.

The exposed information includes Full Name, Date of Birth, Social Security Number, Payment Card Information, Billing and Mailing Address, Email Address, Phone Number, and Employment and Wage Records. These categories of data were part of the records maintained by the companies, which oversee various hotels, resorts, and commercial properties.

Breaches in the hospitality sector often stem from unauthorized access to centralized reservation systems, corporate IT infrastructure, or third-party vendor networks. Such incidents typically result from compromised credentials, phishing attacks, or unpatched software vulnerabilities, potentially granting wide access to internal databases containing both consumer and employee records.

The exposure of Payment Card Information, Billing and Mailing Address, and Full Name could leave individuals vulnerable to fraudulent charges or unauthorized financial transactions. For current and former employees, the compromise of Social Security Number and Employment and Wage Records raises the risk of identity theft, fraudulent tax filings, or unauthorized loans.

Individuals who receive notification about this incident are advised to take protective measures. This includes reviewing financial statements and credit reports regularly for suspicious activity, placing a fraud alert or security freeze on credit files, and changing passwords for online accounts. Remaining vigilant against phishing attempts and monitoring all personal accounts is crucial in mitigating potential risks.