Choice Hotels, a hospitality franchisor based in Maryland that owns chains such as Comfort Inn, MainStay Suites, Econo Lodge and Cambria Hotels, has suffered a cyber incident that exposed 700,000 guest records, including full names, addresses, phone numbers, email addresses and more.
The breach, discovered by independent researcher Bob Diachenko and reported by Comparitech, went undetected for days, allowing the attackers to exfiltrate millions of customer records from an insecure MongoDB database. According to the hotel chain, only 700,000 of the 5.6 million guest records found in the database included the personal data of actual guests – the rest being “test data.”
