Summit Hotel Properties Data Breach: SSNs & Names Exposed

A recent data breach at Summit Hotel Properties, a publicly traded real estate investment trust based in Austin, Texas, has potentially exposed personally identifiable information (PII) of at least one person in New Hampshire. The investigation is ongoing, and the number of impacted individuals may change.

According to the notice, Summit Hotel Properties was alerted by its managed service provider on Oct. 5, 2025, that an unauthorized party had accessed corporate systems and exfiltrated files. Summit initiated its incident response protocols and contained the intrusion by October 6, 2025.

The breach was first disclosed publicly on the dark web by the actor “Worldleaks” on Oct. 24, 2025, who claimed to have breached the company’s data and threatened to publish it within one to two days.

Summit Hotel Properties completed its review of the exfiltrated data on October 26, 2025. Possible information exposed includes names, addresses, phone numbers, email addresses and Social Security numbers. The exposure of PII puts individuals at risk of identity theft and financial fraud.

The incident was reported to the New Hampshire Attorney General’s office on Nov. 21, 2025. The company has notified impacted individuals by mail. The investigation is ongoing, and the number of affected individuals is subject to change.

Summit Hotel Properties’ response

After discovering the breach, Summit Hotel Properties responded promptly by containing it, engaging third-party cybersecurity experts and notifying federal law enforcement. Summit is offering two years of free identity monitoring services through Kroll to affected individuals.

If you receive notification from Summit or your provider about this breach, you may want to:

• Sign up for the free Kroll identity theft protection services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.