Magna Hospitality Group Data Breach Lawsuit Investigation
Received a May 2025 breach notice from Magna Hospitality Group?
Dapeer Law, P.A. is investigating a potential class action against Magna Hospitality Group, a hotel investment, development, and management company based in Warwick, Rhode Island, on behalf of guests, employees, and other individuals whose personal information may have been exposed in the May 2025 cyber incident.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from Magna Hospitality Group dated May 2025.
- Your letter offered enrollment in free Experian IdentityWorks credit monitoring and identity protection.
- You are a current or former hotel guest, employee, or other individual whose personal, financial, or health-related information was held by Magna Hospitality Group in its capacity as a hotel owner and operator.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
According to the notice filed with the California Attorney General, Magna Hospitality Group became aware of suspicious activity affecting certain systems on its network on May 24, 2025. The company's investigation determined that an unauthorized actor accessed certain systems between May 22 and May 24, 2025, and copied files during that period. Magna then conducted a review of the affected files to determine what information they contained and to whom it related.
The notice was posted to the California Attorney General's data breach registry on October 13, 2026, roughly 16 months after the activity was discovered. The California sample letter lists names, with other data elements that vary by individual left blank in the public copy. Notices reported to the Massachusetts and Texas Attorneys General indicate the files may also have included Social Security numbers, driver's license numbers, financial account information, credit or debit card numbers, health insurance information, and medical information for some individuals. Recipients are offered complimentary credit monitoring and identity protection through Experian IdentityWorks, and the company states it notified federal law enforcement and enhanced its security safeguards.
Hotel companies hold a wide range of guest and employee data, from payment cards and loyalty accounts to payroll and benefits records. When Social Security numbers and financial account or card numbers are exposed together, the risk of identity theft and payment fraud can persist for years. Our investigation is examining whether reasonable safeguards were in place, why notification took more than a year, and whether Magna Hospitality Group's response met its obligations under state breach notification and consumer protection laws.
What to do if you received a letter
Keep your notice letter
Do not discard your Magna Hospitality Group breach notice. The letter contains the enrollment code and activation deadline for the free Experian IdentityWorks monitoring and lists the categories of information involved for you, which is important evidence if you decide to participate in a lawsuit.
Enroll in the free Experian credit monitoring
Enroll in the Experian IdentityWorks monitoring offered in your letter before the activation deadline stated in your notice, using the code printed on it. Accepting this benefit does not waive your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because card and financial account numbers may have been involved for some individuals, also review bank, credit card, and hotel loyalty statements for charges or point redemptions you do not recognize.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your Magna Hospitality Group notice, explain your options, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring Magna Hospitality Group to implement stronger data security practices going forward, including better protection of guest payment data and employee records.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from Magna Hospitality Group. What should I do? +
Confirm the letter is authentic, keep it, and enroll in the free Experian IdentityWorks monitoring before the activation deadline in your letter. Review bank, credit card, and hotel loyalty statements for unfamiliar activity, check your credit reports for accounts you did not open, and consider a fraud alert or security freeze with the three credit bureaus. Document any time or money you spend responding, and consider speaking with a data breach attorney about your options.
Am I eligible to join a class action against Magna Hospitality Group? +
Anyone who received a Magna Hospitality Group breach notice about the May 2025 incident is a likely candidate, which may include hotel guests, employees, and others whose data the company held. Eligibility for any future class action will also depend on your state of residence, the categories of your data that were involved, and any documented losses or out-of-pocket expenses.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
The California sample notice lists names, with additional data elements filled in on each individual letter. Notices reported to the Massachusetts and Texas Attorneys General indicate the files may also have included Social Security numbers, driver's license numbers, financial account information, credit or debit card numbers, health insurance information, and medical information for some individuals. Your own letter is the most reliable source for what applied to you.
Did Magna Hospitality Group offer free credit monitoring? +
Yes. Magna Hospitality Group is offering complimentary credit monitoring and identity protection through Experian IdentityWorks. The length of the service and the activation deadline are stated in your individual letter, and you must enroll yourself using the code provided. Enrolling does not waive your right to bring a claim.
How many people were affected by the Magna Hospitality Group breach? +
The California Attorney General filing does not include a total count. Reported state filings indicate approximately 1,727 Massachusetts residents and 1,298 Texas residents were notified, about 3,025 people across those two states, and the nationwide total may be higher. This page will be updated as more information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The sample notice Magna Hospitality Group submitted to the California Attorney General is posted on the California AG's data breach registry and is linked in the Sources & References section below. If you cannot locate your individual letter, Dapeer Law can help you obtain a copy as part of a free consultation.
Sources & references
- Official breach notice filing · California Attorney General, Magna Hospitality Group Notice of Data Event (PDF)
- Company · Magna Hospitality Group (magnahospitality.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
