Waterford Hotel Group, LCC and LMD Holding Company, LLC filed a data breach notification in September 2026 confirming exposure of Social Security numbers, government ID numbers, financial account codes, credit and debit card information, and health records. The number of people affected has not been disclosed. Affected individuals should place a credit freeze or fraud alert immediately and monitor financial and medical accounts closely.
| Company | Waterford Hotel Group, LCC & LMD Holding Company, LLC |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Information, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Waterford Hotel Group Data Breach?
Waterford Hotel Group, LCC and LMD Holding Company, LLC recently disclosed a data breach affecting people whose personal information was stored in their systems. The companies filed a formal notification with the Vermont Attorney General in September 2026. This filing confirmed that sensitive personal data had been exposed.
According to the notification, the exposed information included Social Security numbers, government ID numbers, financial account codes, credit and debit account information, and health records. The exact date the breach was discovered has not been publicly disclosed. As a result, the full timeline of the incident remains unclear to the public.
Because this filing represents the company’s own disclosure to a state regulator, it confirms that an investigation into the exposure took place. However, the notification does not detail the specific method attackers used to gain access. It also does not explain how long the intrusion lasted before it was identified. Additional forensic details may become available as the situation develops.
Who was affected?
The breach may affect guests, employees, or other individuals whose personal data was held by Waterford Hotel Group and LMD Holding Company. Because these entities operate within the hospitality industry, affected individuals could include hotel customers, job applicants, or current and former staff members. The precise relationship between the victims and the companies has not been detailed in the notification.
The exact number of people affected by this breach has not been publicly disclosed. In addition, the filing does not specify the geographic scope of those impacted, though Vermont residents were clearly among them since the notice was filed with that state’s Attorney General. It is possible that residents of other states were also affected, since hotel operations often serve guests from across the country.
What Information Was Potentially Exposed?
The data breach notification lists several sensitive categories of personal information that were compromised. This combination of data types raises significant concern, since it includes both financial and medical details. Together, these categories create a heightened risk profile for anyone affected.
- Social Security numbers
- Government ID numbers
- Financial account codes
- Credit and debit account information
- Health records
This mix of data creates serious risk for identity theft and financial fraud. For example, criminals can use Social Security numbers and government ID numbers to open new credit accounts in a victim’s name. They may also file fraudulent tax returns or apply for loans using stolen identities. Because financial account codes and card information were also involved, unauthorized charges and account takeovers are a real possibility.
In addition, the exposure of health records introduces the risk of medical identity theft. This can happen when someone uses stolen health information to obtain medical services or prescriptions under another person’s name. Such fraud can corrupt medical records and lead to billing disputes. As a result, affected individuals should watch both their financial and medical accounts closely in the coming months.
What is the company doing?
Waterford Hotel Group and LMD Holding Company responded to the breach by filing a formal notification with state regulators. This step indicates that the companies conducted some level of internal review before submitting their disclosure. The notification itself serves as the primary public record of their response so far.
Specifically, the companies filed notice with the Vermont Attorney General on September 25, 2026. This filing is a legally required step whenever residents’ personal data is compromised. Beyond the filing itself, further details about credit monitoring offers, remediation steps, or notification letters to individuals have not been made public at this time.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request a free copy of their credit report from each of the three major credit bureaus. Reviewing these reports carefully can help you spot unfamiliar accounts or inquiries. This is one of the simplest ways to catch identity theft early.
Because the breach involved Social Security numbers, ongoing monitoring is especially important. You can stagger requests from Equifax, Experian, and TransUnion throughout the year for continuous coverage. If you notice anything suspicious, report it immediately to the credit bureau and consider contacting a data breach attorney for guidance.
Consider a Fraud Alert or Credit Freeze
Given that Social Security numbers and financial account details were exposed, placing a fraud alert or credit freeze is a wise precaution. A fraud alert requires lenders to verify your identity before opening new credit in your name. A credit freeze goes further by blocking access to your credit file entirely.
Both options are free and can be requested directly through each credit bureau. However, a credit freeze must be lifted temporarily if you need to apply for new credit yourself. Therefore, many experts recommend a freeze for stronger, longer-term protection against identity thieves.
Protect Your Health Information
Because health records were part of this breach, affected individuals should also review their medical statements and insurance explanations of benefits. Look for unfamiliar treatments, prescriptions, or provider visits that you do not recognize. This could indicate that someone has used your identity for medical purposes.
If you spot suspicious activity, contact your health insurance provider right away. In addition, request a copy of your medical records to check for inaccuracies caused by fraudulent use. Correcting these errors early can prevent complications with future medical care or insurance claims.
Stay Alert for Phishing Attempts
After a data breach, scammers often use exposed information to craft convincing phishing emails or phone calls. These messages may pretend to be from your bank, a government agency, or even Waterford Hotel Group itself. Consequently, you should never click links or share personal details in response to unsolicited messages.
Instead, verify any suspicious communication by contacting the organization directly through a known phone number or website. This simple habit can prevent scammers from tricking you into revealing additional sensitive information. Staying cautious for months after a breach is notified is a reasonable precaution.
Consult a Data Breach Attorney
If you received a notification letter about this breach, you may have legal options worth exploring. Many affected individuals choose to consult a data breach attorney for a free case evaluation. This can help clarify whether you qualify for compensation related to the exposure of your data.
An attorney can also help you understand any deadlines that may apply to filing a claim. Because these deadlines vary by state and case type, prompt action is generally advisable. Taking this step costs nothing upfront and can provide peace of mind.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General