---
title: "Magna Hospitality network data incident"
description: "Magna Hospitality confirmed network access and file copying in May 2025, with individual notices filed in October 2026."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-10-16"
canonical_url: "https://www.ally.security/incidents/magna-hospitality-network-data-incident-2025"
markdown_url: "https://www.ally.security/incidents/magna-hospitality-network-data-incident-2025.md"
stix_url: "https://www.ally.security/incidents/magna-hospitality-network-data-incident-2025/stix.json"
---

# Magna Hospitality network data incident

Magna Hospitality Group detected suspicious network activity on May 24, 2025. Its investigation found that an unauthorized actor accessed systems and copied files between May 22 and May 24.

Last modified Oct 16, 2026 · 1 source

## Summary

- **Environment:** Hospitality company network and stored files
- **Operational impact:** No operational outage duration established
- **Financial impact:** No incident cost established in the reviewed evidence

## What happened

[Magna Hospitality Group](https://www.magnahospitality.com/) detected suspicious network activity on May 24, 2025. Its investigation found that an unauthorized actor accessed systems and copied files between May 22 and May 24. [1](#source-1)

## Impact

The notice says the copied files contained personal information, including names. [1](#source-1)

The public template leaves additional data categories, review-completion date and monitoring duration blank. No affected-person total is established.

## Timeline

### May 22, 2025 — Unauthorized access interval begins

The investigation dates the start of system access and file copying to May 22. See the [source notice](https://oag.ca.gov/system/files/Magna%20Hospitality%20Group%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf). [1](#source-1)

### May 24, 2025 — Suspicious activity detected

Magna detected the activity on the final day of the reported access interval. See the [source notice](https://oag.ca.gov/system/files/Magna%20Hospitality%20Group%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf). [1](#source-1)

### October 16, 2026 — Briefing updated

This briefing was last reviewed and updated on October 16, 2026.

## Threat Group & Attack Vector

The notice does not establish an entry method, malware family or attacker identity.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

Magna reviewed the affected files, added cybersecurity measures, notified federal law enforcement and offered credit monitoring and identity-theft protection. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/magna-hospitality-network-data-incident-2025/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Magna Hospitality Group notice of data event

official · Magna Hospitality Group

<https://oag.ca.gov/system/files/Magna%20Hospitality%20Group%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   Magna Hospitality network data incident: Magna reviewed the affected files, added cybersecurity measures, notified federal law enforcement and offered credit monitoring and identity-theft protection.
2. **Occurred At · 100% confidence · current**  
   Unauthorized access interval begins: 2025-05-22
3. **Resulted In · 100% confidence · current**  
   Magna Hospitality network data incident: Magna Hospitality Group detected suspicious network activity on May 24, 2025. Its investigation found that an unauthorized actor accessed systems and copied files between May 22 and May 24.
4. **Resulted In · 100% confidence · current**  
   Magna Hospitality network data incident: Unauthorized access interval begins
5. **Occurred At · 100% confidence · current**  
   Suspicious activity detected: 2025-05-24
6. **Resulted In · 100% confidence · current**  
   Suspicious activity detected: Magna detected the activity on the final day of the reported access interval.
7. **Affected Organization · 100% confidence · current**  
   Magna Hospitality network data incident: Magna Hospitality Group
8. **Resulted In · 100% confidence · current**  
   Unauthorized access interval begins: The investigation dates the start of system access and file copying to May 22.
9. **Resulted In · 100% confidence · current**  
   Magna Hospitality network data incident: The notice says the copied files contained personal information, including names.
10. **Discovered At · 100% confidence · current**  
   Magna Hospitality network data incident: 2025-05-24
11. **Resulted In · 100% confidence · current**  
   Magna Hospitality network data incident: Suspicious activity detected

</details>