First Call Hospitality Data Breach: A Ransomware Claim, Not Yet a Lawsuit
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
First Call Hospitality is a Fargo, North Dakota company that runs hotels for their owners — Hampton Inn, Home2 Suites, Holiday Inn and Fairfield Inn properties in Minnesota and Missouri among them. On September 17, 2026 a ransomware group put the company on its leak site. As of October 11, 2026 the company has not confirmed a breach, no notice has surfaced, and no lawsuit has been filed. There is no settlement and no claim form.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Has Actually Been Reported
The only source for a “First Call Hospitality data breach” is a criminal group's own claim. Dark-web tracker Ransomware.live recorded the listing of fchhotels.com on September 17, 2026, with the attack estimated at August 31, 2026. The same group listed several other unrelated companies that day.
The listing names no data categories and no number of people. First Call Hospitality has not publicly confirmed it. Leak-site listings are extortion tools: some turn out real, some recycle old data, some are exaggerated.
Who could be affected if it is real: the company runs human resources, payables and insurance for the hotels it manages, so the people most exposed are likely current and former hotel staff — not only guests. A law-firm investigation launched September 18, 2026 is aimed explicitly at employees and staff of the managed hotels.
Case Details
No lawsuit has been filed that we could find. A search of federal dockets on CourtListener for “First Call Hospitality” on October 11, 2026 returned only two unrelated bankruptcy cases, no data-breach class action. What exists is a plaintiffs' firm investigation — attorneys asking potentially affected people to come forward to decide whether to sue. An investigation is not a case: there is no court, no case number and no judge.
For comparison, a filed hotel-operator case looks like the Maine Course Hospitality breach lawsuit, which reached federal court.
Status: Unconfirmed Claim, No Case, No Settlement
Breach-notification laws give companies time to investigate before they mail letters, so silence this early proves nothing either way. The trigger to watch for is a notice letter from First Call Hospitality or from a hotel it manages. If letters go out, lawsuits in data-breach cases usually follow within weeks.
Could You Be Affected?
Nobody can say yet, because no one has stated whose data was involved. The people with the most reason to pay attention:
Current and former employees of First Call Hospitality or of a hotel it manages — payroll and HR records usually include Social Security numbers and bank details.
Guests of its managed hotels are a more open question. Hotel brands such as Hilton, IHG and Marriott run their own reservation and loyalty systems; whether a management company holds guest payment data depends on the property.
The practical test is your mail. If First Call Hospitality confirms a breach, it must notify affected people directly. Keep any letter and the envelope.
Is There Money?
If a breach is confirmed and a case is later settled, data-breach settlements typically reimburse documented losses and add a smaller flat payment; our data breach settlement calculator shows how those are structured. A recent example of a finished one is the FinWise Bank / American First Finance settlement. None of that applies here until there is a case.
First Call Hospitality Timeline
- 1
August 31, 2026 — Estimated Attack Date
The date the leak-site listing gives for the alleged intrusion. It comes from the attackers' claim, not from the company.
- 2
September 17, 2026 — Leak-Site Listing
Ransomware.live records fchhotels.com on a ransomware group's leak site. No data categories or victim counts are named.
- 3
September 18, 2026 — Law-Firm Investigation
Plaintiffs' attorneys open an investigation and ask employees and hotel staff to come forward. No complaint is filed.
- 4
October 11, 2026 — No Confirmation, No Case
No company statement, no attorney general filing we could find, and no lawsuit on federal dockets.
- 5
Next — Notice Letters or Nothing
If the company confirms a breach, notice letters and state filings would show who and what was affected. Lawsuits would likely follow.
Three Things to Watch For
An unconfirmed breach with no claim form is a gap scammers like to fill:
“Check if your data was in the First Call leak”
Breach-check and data-removal sites write pages for every leak-site listing and ask for your email or payment. They cannot see the stolen files. Only a notice from the company tells you whether you are included.
HR or payroll emails after the listing
If staff data was taken, the first misuse is often phishing that looks like your hotel or its management company — asking you to update direct deposit or confirm your Social Security number. Verify by phone with a number you already know.
“Claim your First Call Hospitality settlement”
There is no settlement and no lawsuit. Any site or caller offering a payment or asking a fee to “register” you is not legitimate. A real settlement is run by a court-appointed administrator and never charges a fee.
First Call Hospitality Breach — Questions People Actually Ask
Is there a First Call Hospitality data breach lawsuit?
Not as of October 11, 2026. Lawyers have announced an investigation, but we found no complaint on federal dockets. There is no court, no case number and no judge.
Did First Call Hospitality confirm a data breach?
No. The only source is a ransomware group's leak-site listing, recorded on September 17, 2026 with an estimated attack date of August 31, 2026. The company has not publicly confirmed it, and no state attorney general filing has surfaced.
What data was exposed, and how many people?
Unknown. The listing names no data categories and no number of affected people. Those details would appear in an official notice letter or attorney general filing, if one is made.
I work at a hotel First Call Hospitality manages. Should I worry?
Employees are the group a management company holds the most sensitive data on, and the law-firm investigation targets staff specifically. Until a notice arrives, a credit freeze is a cheap, reversible precaution, and watch for fake payroll or HR emails.
Are data breach settlements legit?
Real ones are. A genuine settlement is approved by a court, run by a named administrator and never asks for a fee. For First Call Hospitality the question does not arise yet: there is no settlement. Current real ones are on our open settlements list.
How do I check if I got data breached?
For this incident, the reliable signal is a notice letter from First Call Hospitality or a hotel it manages. More generally, companies must notify affected people directly, and many states publish breach notices filed with their attorney general.
Did Marriott have a data breach?
Yes, but that is a separate matter. The Starwood guest-database breach led to In re Marriott International, Inc., Customer Data Security Breach Litigation, No. 19-2879, in the U.S. District Court for the District of Maryland. First Call Hospitality is an independent management company, and this page does not cover the Marriott case.
What is worth doing right now?
Freeze your credit at all three bureaus — free and reversible. Change any password you reused on a hotel or staff portal. Keep any letter from First Call Hospitality or your hotel. Ignore anyone offering to file a claim.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Maine Course Hospitality Breach
Another hotel operator breach, with a filed federal class action
Data Breach Settlement Calculator
What comparable breach settlements have paid per person
Open Class Action Settlements
Settlements currently accepting claims, with deadlines
Settlement Payout Calculator
Estimate a per-person share once a fund exists