Morning Star Tours Data Breach Compromises Travelers' Sensitive Information

Morning Star Tours, a prominent Oregon-based travel and tour operator, recently disclosed a significant data security incident. The breach, which took place on April 22, 2026, was reported to authorities on May 31, 2026, confirming that sensitive customer information was compromised within their systems.

The exposed data includes a comprehensive list of personal details: Full Name, Date of Birth, Home Mailing Address, Email Address, Phone Number, Payment Card Information, Passport Number, Frequent Flyer Account Details, and Emergency Contact Information. Such a broad exposure of sensitive data creates significant concern for affected individuals.

With these types of details compromised, victims face severe risks, including identity theft, unauthorized financial transactions, and misuse of travel-related credentials. Bad actors could exploit this information for fraudulent purposes, from making unauthorized purchases with payment card data to potentially impersonating individuals using passport details. It is critical for recipients of a breach notification to act swiftly.

Morning Star Tours, as a collector and custodian of extensive personal and financial data, is legally obligated to maintain robust security protocols. The Oregon Consumer Identity Theft Protection Act and federal regulations require companies to implement reasonable safeguards. This breach suggests a potential failure in these obligations, allowing unauthorized access to customer records.

If you have received a notification letter from Morning Star Tours, it confirms your personal information was exposed due to this incident. Our legal team is actively investigating potential class action claims against Morning Star Tours on behalf of affected customers. We offer free case reviews and work on a contingency fee basis, meaning there are no upfront costs to you.