Corporate Travel Service Data Breach Exposes Social Security Numbers

CTS Journey Holdings LLC, doing business as Corporate Travel Service, is a family-owned travel agency, tour operator and event producer based in Northville, Michigan. The company disclosed a data breach that has so far impacted 564 Texas residents, 55 Massachusetts residents and 37 Vermont residents.

Corporate Travel Service experienced a cybersecurity incident in which an unauthorized actor gained access to its network environment. The unauthorized access took place between Dec. 3, 2025, and Dec. 11, 2025.

After learning of the incident, the company launched an investigation with the help of external cybersecurity professionals experienced in handling these types of situations. The investigation sought to determine whether any personal or sensitive data had been compromised. After an investigation, the company discovered on July 2, 2026, that the systems accessed during the breach contained personal information belonging to affected individuals.

The types of personal information exposed included full names, Social Security numbers, driver's license numbers, state ID card numbers, government-issued ID numbers such as passport numbers, credit or debit card numbers, financial account information and medical information.

The breach was reported to the California Attorney General on Aug. 3, 2026.

Corporate Travel Service's response to the breach

Corporate Travel Service is offering complimentary credit monitoring services to affected individuals. To enroll, affected individuals must sign up within 90 days from the date of their notification letter using the unique code included in the letter.

Corporate Travel Service has set up a toll-free response line at 1-866-898-5010 for individuals with questions about the incident. The line is available Monday through Friday, 8 a.m. to 8 p.m. ET, excluding U.S. holidays.