Data Breach Notifications

Entity Information

• Type of Organization: Other Commercial
• Entity Name: Hotel Vermont
• Street Address: 41 Cherry Street
• City: Burlington
• State, or Country if outside the US: Vermont
• Zip Code: 05401

Submitted By

• Name: Sandy Garfinkel
• Title: Attorney
• Firm name (if different than entity): Eckert Seamans
• Telephone Number: 4125666868
• Email Address: sgarfinkel@eckertseamans.com
• Relationship to entity whose information was compromised: Legal Counsel

Breach Information

• Total number of persons affected (including residents): 140
• Total number of Maine residents affected: 7
• If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
• Date(s) Breach Occured: 01/21/2021-01/21/2021
• Date Breach Discovered: 03/11/2021
• Description of the Breach:
  • Other
  • If other, please specify: Phishing Email -- The Hotel utilizes a third party vendor, TravelClick, for online reservation services. On March 11, 2021, TravelClick informed the Hotel that the Hotel had been the victim of a phishing attack by a cybercriminal posing as a TravelClick representative. Using a deceptive e-mail and web portal, the cybercriminal captured, and then used, a Hotel employee’s TravelClick login credentials to access guest reservation records in Travel Click’s database. According to TravelClick, the cybercriminal was able to view the Hotel's guest reservation information within the TravelClick account database on January 21, 2021.
• Information Acquired - Name or other personal identifier in combination with:

Notification and Protection Services

• Type of Notification: Written
• Date(s) of consumer notification: 04/06/2021
• Copy of notice to affected Maine residents: Hotel Vermont - General (Non MA).pdf
• Date of any previous (within 12 months) breach notifications: 0
• Were identity theft protection services offered: No
• If yes, please provide the duration, the provider of the service and a brief description of the service: