Magna Hospitality Group Data Breach: Files Copied in May 2025, Letters in October 2026
Reference Guide
Magna Hospitality Group is a Warwick, Rhode Island hotel management company. Someone copied files from its systems between May 22 and May 24, 2025. It reported the breach to the California Attorney General on October 13, 2026 — about 17 months later. As of October 17, 2026 we found no Magna Hospitality Group data breach lawsuit on file, and there is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened in the Magna Hospitality Group Data Breach
Magna Hospitality Group was founded in 1998 and describes itself as a third-party hotel management company running more than 19,300 guest rooms across the country under the major hotel brands. That is why your letter may come from a company you never heard of: Magna may have been the operator behind a branded hotel where you worked or stayed.
According to Magna's notice letter, it became aware of suspicious activity on May 24, 2025. Its investigation found that an unauthorized actor got into certain systems between May 22 and May 24, 2025 and copied certain files. Magna says it then reviewed those files to find out whose information was in them, added security measures and notified federal law enforcement.
The letter lists your name plus data elements filled in person by person. A summary of Magna's October 13, 2026 filing with the Massachusetts consumer-affairs office lists Social Security numbers, financial account information and driver's license numbers. Breach trackers report that a ransomware group claimed the attack on its leak site on October 22, 2025 and said it took 385 GB of data. That is the attackers' claim, and Magna's letter does not mention ransomware.
Case details
No lawsuit has been filed that we could find. As of October 17, 2026, we found no complaint naming Magna Hospitality Group over this breach in any federal court. Our check used a federal docket database with a short look-back period, so a complaint filed earlier might not appear in it. State courts are not covered, and a case filed this week may not show up yet.
What does exist are law-firm “investigations.” These are ads looking for affected people, posted from October 15, 2026, and they say outright that attorneys are still deciding whether a class action can be filed. An investigation is not a lawsuit.
Two other hotel-industry breaches are separate matters. The Maine Course Hospitality breach involves a different company and has its own federal class action. The First Call Hospitality report is also unrelated.
Status: Notices Mailed, No Lawsuit, No Settlement
Expect that to change. Suits often follow within weeks of an attorney-general filing, and the delay here is long: about 17 months between discovery in May 2025 and the October 13, 2026 California report. If a complaint is filed, this page will be updated with the court and case number.
Are You Affected?
The test is the letter. Magna's notice is titled as a notice of security incident or data breach, signed “Magna Hospitality Group,” and gives a call center at (844) 301-0162 (8:00 a.m. to 5:30 p.m. Central, weekdays except major holidays). The template shows a Kroll return address, so the envelope may say Kroll and not Magna. That is normal for breach mailings.
Who is likely in the files? Magna hasn't said, and it hasn't published a total count. Because the company manages hotels and employs the staff who run them, current and former employees are a plausible group. Guests are another. Your letter lists exactly which data elements were found for you, so keep it and the envelope. If a class action is filed and later settles, that letter is usually the simplest proof that you belong in the class.
Is There Any Money?
For context, and not as a prediction: data breach settlements involving Social Security numbers usually combine reimbursement of documented losses, a smaller flat payment and credit monitoring. Our data breach settlement calculator shows what comparable cases have paid. Settlement amounts depend on class size, and Magna has not disclosed how many people are affected.
Magna Hospitality Group Breach Timeline
May 22, 2025 — Intrusion Begins
Per Magna's notice, an unauthorized actor gets into certain company systems and starts copying files.
May 24, 2025 — Magna Notices
Magna becomes aware of suspicious activity, and the access window ends the same day. An investigation and a file review begin.
October 22, 2025 — Leak-Site Claim
Breach trackers report that a ransomware group claimed the attack and said it took 385 GB of data. That figure is the attackers' claim and has not been confirmed.
October 13, 2026 — Regulators Notified
Magna reports the breach to the California Attorney General, which lists a breach date of 05/22/2025. A Massachusetts filing is dated the same day. Magna's notice letters offer Experian monitoring.
October 15, 2026 — Law Firms Start Recruiting
Attorney “investigation” pages go up asking affected people to come forward. That is advertising, not a filed case.
October 17, 2026 — No Lawsuit Located
We found no complaint against Magna Hospitality Group over the breach. There is no settlement, no claim form and no deadline beyond the Experian enrollment date.
Three Things to Watch For
A breach that is already public, with Social Security numbers involved and no official claims process, gives imposters an opening:
“Claim your Magna settlement” forms
There is no Magna settlement. Some search results are law-firm intake forms with “submit your claim” buttons. Filling one in sends your details to a lawyer. It does not file a claim for money.
Callers posing as Magna or Experian
The real numbers are in your letter. Magna's call center is (844) 301-0162, and enrollment uses the code printed in your letter. If someone calls you first and asks for your full Social Security number or bank details to “activate protection,” hang up and call the number in the letter.
Fake HR or hotel-brand emails
Magna runs hotels under well-known brands, so phishing can look like it comes from a hotel's HR or payroll team and ask you to “verify” your direct deposit after the breach. Check with your employer through a channel you already use.
Magna Hospitality Group Data Breach — Questions People Ask
Short answers to the questions people ask most about this case.
Is there a Magna Hospitality Group data breach lawsuit?
Not that we could find as of October 17, 2026. We checked a federal docket database with a short look-back period and found no complaint, so we cannot rule out an earlier filing. Law firms are advertising investigations, which means they are deciding whether to sue. State courts are not covered by our check, and new filings can take days to appear.
What company got data breached?
Magna Hospitality Group, a hotel management company founded in 1998 at 300 Centerville Road, Warwick, Rhode Island. It manages more than 19,300 guest rooms under major hotel brands, so the hotel brand you know may not be the company that held your data.
Is this the Marriott data breach?
No. Magna is an independent management company that is approved to operate major brands. Its May 2025 breach is its own incident, notified by Magna. If you are asking about a breach at a hotel brand itself, look for that brand's own notice. This page does not cover it.
What information was exposed?
Your letter lists your name plus the data elements found for you. A summary of Magna's Massachusetts filing lists Social Security numbers, financial account information and driver's license numbers. Not everyone had every element exposed.
How many people are affected?
Magna has not disclosed a total in any filing we could read. The California Attorney General lists the breach with a reported date of 10/13/2026 but gives no count.
Why did notification take so long?
Magna says it ran a file review to work out whose data was involved. Discovery was May 24, 2025, and the California filing came on October 13, 2026, about 17 months later. A long delay is often the main claim in breach lawsuits. No court has ruled on it here.
Is the letter real?
Genuine letters are signed by Magna Hospitality Group, describe the May 22–24, 2025 access, offer Experian monitoring and give (844) 301-0162 as the call center. The return address may be Kroll. To check, call the number yourself. Don't use a number from an email.
What should I do right now?
Enroll in the Experian monitoring before the deadline in your letter. Freeze your credit at all three bureaus, which is free and reversible. Watch your bank statements, and keep the letter in case a lawsuit or settlement follows.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Maine Course Hospitality BreachA different hotel company, with a filed federal class action
- First Call Hospitality BreachAnother hospitality breach report, status unconfirmed
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Open Class Action SettlementsSettlements currently accepting claims, with deadlines