Inca Floats, Inc. dba International Nature & Cultural Adventures and Integrity Galapagos Data Breach — Class Action Review

Inca Floats, Inc., doing business as International Nature & Cultural Adventures and Integrity Galapagos, operates within the specialized travel and tourism sector, curating expedition cruises, wildlife tours, and cultural excursions to remote destinations such as the Galapagos Islands and South America. Because international travel, particularly to ecologically sensitive and protected regions, requires extensive logistical planning, clients must provide a vast repository of deeply personal and sensitive documentation well in advance of departure. This information routinely includes full legal names, scanned passport details, government-issued identification numbers, dates of birth, emergency contact particulars, detailed dietary and medical history disclosures for expedition safety, and comprehensive financial account or credit card details required for high-value booking transactions.

In 2025, Inca Floats, Inc. dba International Nature & Cultural Adventures and Integrity Galapagos reported a formal data security incident to the New Hampshire Attorney General, alerting consumers that their confidential information had been compromised. While exact technical details continue to emerge, incidents impacting specialized travel operators typically involve unauthorized access to centralized reservation databases, cloud storage repositories, or compromised third-party vendor booking platforms. These pathways frequently harbor vulnerabilities that malicious actors exploit to deploy malware, infiltrate administrative networks, or extract unencrypted customer records accumulated over years of operation.

The exposure of this sensitive data catalog creates severe, multi-faceted risks for affected travelers and clients. Passport numbers and dates of birth serve as primary building blocks for synthetic identity theft and unauthorized passport fraud, while compromised credit card numbers and financial data open the door to immediate fraudulent charges and account takeovers. Furthermore, because adventure travel companies often collect specialized medical and dietary notes to accommodate remote excursions, the unauthorized disclosure of private health-related information exposes victims to targeted phishing scams and medical privacy violations. When combined with home addresses and phone numbers, this breach arms cybercriminals with the exact dossier needed to execute convincing social engineering attacks against trusting consumers.

Under state data privacy statutes and common law negligence principles, Inca Floats, Inc. dba International Nature & Cultural Adventures and Integrity Galapagos had an affirmative legal obligation to implement and maintain reasonable cybersecurity safeguards to protect the sensitive personal and financial data entrusted to them. This duty requires utilizing robust encryption protocols, restricting network access, conducting regular security audits, and ensuring third-party booking vendors adhere to strict data protection standards. The occurrence of a data breach strongly indicates a failure in these foundational security duties, suggesting that existing safeguards were inadequate to deter unauthorized network intrusion and data exfiltration.

Receiving a data breach notification letter from Inca Floats, Inc. dba International Nature & Cultural Adventures and Integrity Galapagos serves as official legal confirmation that your confidential records were compromised due to corporate inadequate security practices. Under consumer protection and class action law, notification establishes immediate legal standing to pursue a claim for damages, regardless of whether fraudulent charges have already appeared on your accounts. Our law firm is actively investigating potential class action litigation on behalf of affected individuals to hold the company accountable for failing to safeguard private data. We handle these complex privacy cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.