Morning Star Tours Reports Data Security Incident to Oregon Regulators

Morning Star Tours, a prominent travel and tour operator, publicly reported a data security incident to the Oregon Attorney General on May 31, 2026. This filing indicates that unauthorized access to systems occurred on April 22, 2026, leading to the exposure of customer data.

The compromised information includes Full Name, Date of Birth, Home Mailing Address, Email Address, Phone Number, Payment Card Information, Passport Number, Frequent Flyer Account Details, and Emergency Contact Information. As a travel company, Morning Star Tours handles extensive customer details necessary for booking and logistics, making such a breach significant for affected individuals.

While the specific method of unauthorized access was not detailed in public records, breaches in the travel sector often involve external threats exploiting vulnerabilities in booking platforms or customer databases. An investigation into the full scope of the incident is currently ongoing.

For those who may be impacted, reviewing any official notification received from Morning Star Tours is a crucial first step. It is recommended to carefully monitor financial accounts and credit reports for any unauthorized transactions or suspicious activity that could indicate misuse of personal information.

Additionally, consider placing a fraud alert or security freeze on your credit files through the major credit bureaus. Changing passwords for online accounts, especially those linked to travel or financial services, and being cautious of unsolicited emails or calls that could be phishing attempts are also important general precautions to take.