Morning Star Tours Data Breach Notice (Oregon Attorney General)

The personal information of 18,997 people was exposed in a breach at Morning Star Tours on April 22, 2026. The company filed its notice with the Oregon Department of Justice on May 31, 2026 — 39 days later.

If you received a letter from Morning Star Tours, your records were among those included. The filing states that the organisation must notify affected individuals directly, usually by post. Absence of a letter usually means you were not in the affected group, but anyone who has moved since April 22, 2026 should contact the company directly to confirm their status.

What the Exposed Personal Information Actually Enables

The record lists personal information as the category exposed. This typically includes name combined with details such as address and date of birth. These pieces of information do not expire. Unlike a credit card or password, they cannot be cancelled or rotated. Once they are out, they remain usable for identity theft and fraud for years.

Name plus date of birth is a common foundation for impersonation attempts. Criminals can use it to open accounts, file fraudulent tax returns, or apply for government benefits in someone else’s name. Address information adds precision, helping attackers tailor phishing messages or locate victims for more targeted scams.