Maine Course Hospitality Data Breach: Class Action Filed (August 2026 Status)
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The Freeport, Maine hotel group was sued in federal court after a November 2025 breach exposed nearly 7,200 people's Social Security numbers and health information — and victims weren't told for roughly eight months. No settlement exists yet — this tracker follows the case.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened at Maine Course Hospitality
Maine Course Hospitality Group — a Freeport, Maine-based hotel group operating properties across Maine and New England — suffered a data breach in early November 2025. Per the security breach report filed with the Maine Attorney General, nearly 7,200 people had their names, Social Security numbers and health information compromised, including roughly 4,000 Maine residents. The core allegation goes beyond the breach itself: the lawsuit claims the company knew about the breach when it occurred in November but only began informing victims on July 31, 2026 — about eight months later — in alleged violation of Maine's notification law, which requires reporting within 30 days.
Case Details
A proposed class action was filed in federal court in August 2026 by a Biddeford, Maine woman whose personal information was stolen, on behalf of the roughly 7,200 affected people. The suit alleges Maine Course Hospitality failed to implement reasonable security measures and violated Maine's 30-day breach-notification law, and it seeks damages, penalties, and certification of the class. No class has been certified yet, and the allegations are unproven.
Current Status — Verified August 17, 2026
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is Affected?
Nearly 7,200 people per the AG report — including about 4,000 Maine residents. The SSN + health-information mix suggests employees and benefits records are the core of the set (hotel guests rarely hand over SSNs), though the company hasn't broken it down. If you received a notification letter from Maine Course Hospitality (mailed from July 31, 2026 onward), you're in the affected group — keep the letter.
What Could This Pay? (Honest Answer)
Case Timeline
- 1
Early November 2025: The breach
Attackers steal personal data — names, SSNs and health information — from the hotel group's systems.
- 2
November 2025 – July 2026: The silence
Per the lawsuit, the company knew of the breach when it occurred but did not begin informing victims — the core of the notice-delay claim.
- 3
July 31, 2026: Notifications finally begin
Roughly eight months after the breach, victims start receiving notice — Maine law requires notification within 30 days.
- 4
~August 2026: AG report details the scope
The security breach report to the Maine Attorney General: nearly 7,200 affected, ~4,000 of them Maine residents.
- 5
August 2026: Class action filed
A Biddeford plaintiff files in federal court seeking class status, damages and penalties.
- 6
Next: the company's response
Answer or motion to dismiss, then class-certification briefing — the standard early path.
- 7
What's next
If the class is certified, settlement talks typically follow the early motions. We update this page at each milestone.
Maine Course Breach Scams
Late-notified victims are prime scam targets — criminals had an eight-month head start.
Fake 'settlement claim' sites
No claims portal exists. Any payout form today is a scam. A real claims process would appear in the federal docket — and on this page.
Fake benefits or HR outreach
With health information exposed, expect fake insurance or benefits calls quoting real details. Verify only through numbers on your official documents.
'Overdue' tax or credit collection
Eight months of SSN exposure means fraud may already exist in your name. Treat surprise collection calls as identity-theft signals: demand written validation, check your credit reports, and dispute — don't pay.
Maine Course Hospitality Breach FAQs
Is there a Maine Course Hospitality settlement?
No. As of August 17, 2026 there is no settlement, no administrator, no fund. What exists: a federal class action filed in August 2026 on behalf of the ~7,200 affected. We update this page when anything payable exists.
Why is the late notification such a big deal?
Maine law requires breach notification within 30 days; the lawsuit alleges roughly eight months of silence. That's a statutory-violation claim independent of proven fraud — and every month of silence was a month victims couldn't freeze credit or watch accounts.
I stayed at one of their hotels — am I affected?
Probably only if you received a letter. The SSN + health-data mix points to employee and benefits records rather than guest data, but the company hasn't published a breakdown — the notification letter is the definitive signal.
What data was exposed?
Per the AG report: names, Social Security numbers and health information for nearly 7,200 people, including about 4,000 Maine residents.
What should I do right now?
(1) Credit freezes at all three bureaus — overdue by eight months through no fault of yours; (2) pull free credit reports and look for accounts opened since November 2025; (3) review medical/insurance statements; (4) document everything — the exposure window makes documented losses unusually credible here.
Do I need to join the lawsuit?
No — if the class is certified and settles, it covers affected people automatically unless they opt out. Keep your notification letter as proof of membership.
How much could this pay?
Unknown — but the combination of a small class (~7,200), serious data (SSN + health), and a clean statutory claim is the profile where per-person amounts historically land above the mega-breach average. Anyone quoting a number today is guessing.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.