On or around October 17, 2025, The Thayer Hotel issued a data breach notification following a cybersecurity incident that occurred on September 19, 2025. The hotel engaged Kroll to assist with investigation and notification efforts. According to the official notice, an unauthorized third party gained access to certain systems containing guest and employee information. There are 33,053 impacted individuals.
Founded in 1926, The Thayer Hotel is a historic property located in West Point, New York, serving guests from across the country.
The hotel sent data breach notification letters to affected individuals and is offering complimentary identity protection services through Kroll. If you received a Data Breach notification letter from The Thayer Hotel, it confirms that your information was potentially impacted.
What information is involved in the The Thayer Hotel Data Breach?
Compromised information may include:
Name
Driver’s License Number
Passport Numbre
Date of Birth
State Identification Numbers
Social Security Number
Your Personally Identifiable Information (PII) includes details that can be used to identify you. Organizations are legally obligated to safeguard this data, and failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.
A specific category of PII is Protected Health Information (PHI), which pertains to personal medical data. PHI is safeguarded under both federal and state regulations. Entities such as healthcare providers and businesses that manage PHI must ensure its security. Just like PII, compromised PHI can be misused by identity thieves, and it’s common for cybercriminals to use both types of information together.
If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly.
If you received a NOTICE OF DATA BREACH letter from The Thayer Hotel, your personal and/or financial information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.