According to a notice, Red Roof experienced a data incident in late September that did not involve any guest data.
On September 23, Red Roof found that there was unauthorized activity within its systems, prompting them to immediately take action and investigate the situation. The event was soon identified as a ransomware attack, as a small and limited portion of Red Roof’s became encrypted.
Soon after, the company took its system offline to begin fixing the event. Red Roof put forward measures to strengthen the security of their IT systems and policies, which includes implementing security software and hardware, resetting and strengthening passwords and bringing on new network access policies. The cyberattack was reported to appropriate agencies and law enforcement.
The information that was compromised during the attack includes: name, date of birth, social security number, driver's license number, passport number, financial account number, credit and/or debit card number, medical information and health insurance information.
“There is currently no indication that any Information has been misused for identity theft or fraud in connection with this Incident,” Red Roof said in a statement.
Red Roof does urge the potentially affected individuals to monitor their accounts for any suspicious activity such as identity theft or fraud. The company is also offering free credit monitoring services for 24 months for those individuals.
Jeff Wardon, Jr. is the assistant editor for the facilities market.
