Hilton Grand Vacations data breach

Clerk's notes

On February 20, 2026, Hilton Grand Vacations formally reported a data security incident to the Massachusetts Attorney General's Office. This filing alerts authorities and affected consumers to an unauthorized intrusion into the company's digital systems, which may have compromised sensitive data.

While the specific types of data exposed were not detailed in the report, the incident involved personal information entrusted to Hilton Grand Vacations. Such breaches typically concern data that allows for customer relationship management, vacation planning, and financial transactions within the hospitality sector.

The exposure of your data could lead to various risks, including increased susceptibility to targeted phishing attempts, financial fraud, or identity theft. It is important for anyone who receives an official notification to understand the potential implications of this exposure.

Under Massachusetts Data Security Regulations (201 CMR 17.00), companies like Hilton Grand Vacations are obligated to implement robust safeguards to protect personal information. A breach suggests that these foundational security measures may have been insufficient to prevent unauthorized access.

Receiving a formal data breach notification letter from Hilton Grand Vacations establishes your legal standing in this matter. This notification confirms that your information was part of the compromise, which is the necessary step to explore legal options.

If you have received a breach notification, it is recommended to remain vigilant by monitoring your financial accounts and credit reports for any suspicious activity. You may also wish to request a free case review to understand your legal rights and potential next steps.

If a notification letter about this breach reached you, see every Massachusetts data breach on file or browse all cases.