Innovative Hotel Profit Strategists

7/14/25 11:45am Good Afternoon, Before we provide an update on our system recovery efforts, we want to be transparent about the exposure and legal matters related to the recent security breach. Please take a moment and review this. 1. Contact with Hackers The individuals behind the breach have contacted us, demanding payment in exchange for releasing their encryption on our servers. However, since our recovery efforts are progressing well without their assistance, we are not inclined to negotiate or pay them for decryption. They are also threatening to: •Publicly disclose data taken from our systems, and/or •Notify you directly that they have breached CIA Software. Their claim of possessing data is being treated seriously, but it’s important to understand the following: 2. Nature of the Data and Risk of Exposure •No sensitive financial or personal data is stored in our system. CIA Software does not store PCI data, Social Security Numbers, credit card details, bank account information, or other personal financial records. •We cannot verify exactly what, if any, data they have. •Our system stores aggregated operational data, such as: oTotal Amex payments received on a given day (but not individual transactions) oTotal payroll amounts for a department (but not amounts paid to individual employees) •Our data structure is complex, involving many interlinked tables. It would require a deep understanding of our database schema to associate any data with a specific hotel. 3. Law Enforcement Involvement We have reported the incident to both the Department of Homeland Security and the FBI, and official investigations are underway. The FBI has advised: “The FBI does not support paying a ransom in response to a ransomware attack. Paying a ransom doesn’t guarantee you or your organization will get any data back. It also encourages perpetrators to target more victims and offers an incentive for others to get involved in this type of illegal activity.” FBI Ransomware Guidance Given this advice, the nature of the data involved, and our current recovery progress, we do not believe it is prudent to engage with or compensate the attackers. We will continue cooperating with the FBI in their efforts to identify those responsible. 4. Additional Exposure – Email Addresses Our system does store user email addresses. As a precaution, please be extra vigilant when receiving any unexpected or suspicious emails, especially from someone claiming to be from CIA Software. We can share a screenshot of an email received from the attackers. If you are contacted by Jerome Patison or anyone else claiming to have your data, please forward it to us so we can provide it to the FBI. If you have concerns or would like to discuss what data might have been exposed, we are more than willing to schedule a call with you. Ultimately, we understand this is your data and believe you deserve to be included in any discussions about how we respond to the hackers’ threats. A separate update on our system recovery will follow shortly. It will include required password updates. Thank you, Jim Jim DiMartino Executive Vice President Please Support www.enditmovement.com