Colorado River Adventures Data Breach: What Happened & What To Know

Lemberg Law is investigating a data breach affecting Colorado River Adventures. If you received a notice from the company, your sensitive personal and financial information may have been exposed. Here’s what you need to know.

How Did This Happen?

On January 21, 2025, Colorado River Adventures discovered suspicious activity in its IT systems. In response, the company launched an internal investigation, contacted law enforcement, and brought in cybersecurity professionals to assess the breach.

The investigation found that an unauthorized party had accessed parts of the company’s data. The company confirmed the breach may have involved personal information tied to customers or members.

What Information Was Involved?

The company reports that the following types of personal information may have been compromised:

• Name
• Address
• Date of birth
• Social Security number
• Financial account number

What Colorado River Adventures Is Doing

Colorado River Adventures has taken several steps, including:

• Implementing enhanced cybersecurity protections
• Offering complimentary identity monitoring through IDX
• Providing affected individuals with CyberScan monitoring, identity theft recovery support, and a $1 million identity theft insurance policy
• The deadline to enroll in these free services is May 30, 2025.

What You Should Do

If you were notified by Colorado River Adventures:

1. Enroll in the credit and identity monitoring services
2. Review your bank and credit account statements for unusual or unauthorized activity
3. Place a fraud alert or credit freeze with the credit reporting agencies
4. Report suspected identity theft to the FTC at www.identitytheft.gov and to your state attorney general

Get Help

If your personal information was exposed in the breach, you may have legal rights. Lemberg Law offers free consultations—and you pay nothing unless we win. Contact us today to explore your options.

Source: California Department of Justice