Vacation Myrtle Beach Data Breach Impacts Customer Information

Vacation Myrtle Beach, a hospitality and resort management company, filed a data breach notification with the Maine Attorney General on May 15, 2026. The company disclosed that an unspecified security incident had compromised sensitive customer information. Details about how the breach occurred or the exact date it began were not specified in the public filing, but an investigation is ongoing.

The compromised data, as reported in the filing, includes customers' Full Name, Mailing Address, Email Address, Payment Card Information, Reservation and Travel History, Date of Birth, Account Passwords and Credentials, and Phone Number. These categories cover various personal and financial details that the company collects to manage bookings and guest accounts.

The exposure of such data creates potential risks for affected individuals. With Payment Card Information and personal identifiers like names and addresses exposed, there is an increased risk of fraudulent charges, unauthorized account access, and targeted phishing attempts. Account Passwords and Credentials, if compromised, could allow access to online accounts, while Reservation and Travel History could be used in social engineering scams.

Individuals who received a notification from Vacation Myrtle Beach are advised to take protective measures. This includes closely monitoring all financial account statements for unusual activity and reviewing credit reports for any unfamiliar inquiries or accounts. Additionally, changing passwords for any online accounts that used the same credentials as those compromised is strongly recommended, and enabling multi-factor authentication where available can add an extra layer of security.

This incident highlights the ongoing challenges companies face in protecting the extensive consumer data they collect. Public filings like these serve to inform affected parties and the wider public about verified security events.