Wyndham Lawsuit: FTC, Timeshare, and Trafficking Cases

Wyndham has been sued, and has done its share of suing, across a wide range of legal fronts. The most important Wyndham lawsuits fall into a few clusters: a landmark Federal Trade Commission cybersecurity case that reshaped U.S. data-security law, a long line of timeshare sales class actions and state attorney general enforcement actions, a multimillion-dollar whistleblower verdict, franchisor liability suits tied to sex trafficking at branded hotels, and a newer mass arbitration investigation over website tracking. Outcomes have run from major settlements and injunctions to dismissals and denials of class certification.

The FTC Data Breach Case

Between 2008 and 2009, hackers breached Wyndham’s network three times and obtained payment card information for more than 619,000 consumers, causing at least $10.6 million in fraudulent charges. The FTC sued, alleging that Wyndham stored card numbers in clear text, used weak passwords, ran no firewalls between hotel systems and the open internet, and misled consumers with a privacy policy claiming “industry standard” protections.1United States Court of Appeals for the Third Circuit. FTC v. Wyndham Worldwide Corp., No. 14-3514

Wyndham argued the FTC had no authority to regulate corporate cybersecurity at all. On August 25, 2015, the Third Circuit disagreed. The court held that the FTC’s power to police “unfair” practices under Section 5 of the FTC Act reaches data security, that the breaches caused substantial injury consumers could not reasonably avoid, and that being targeted by hackers does not shield a company from liability when its own failures made the harm foreseeable.2FTC. Third Circuit Rules in FTC v. Wyndham Case1United States Court of Appeals for the Third Circuit. FTC v. Wyndham Worldwide Corp., No. 14-3514

Wyndham settled on December 9, 2015. The stipulated order, approved by a unanimous FTC vote, imposed a 20-year compliance regime: a written information security program, regular risk assessments, vetting of third-party vendors, and annual independent audits certifying compliance with the Payment Card Industry Data Security Standard. If a future breach hits more than 10,000 payment card numbers, Wyndham must produce a forensic report within 180 days and share assessments with the FTC within 10 days. The settlement carried no admission of liability.3FTC. Wyndham Settles FTC Charges It Unfairly Placed Consumers’ Payment Card Information at Risk4FTC. Stipulated Order for Injunction, FTC v. Wyndham

Timeshare Sales Class Actions

The longer-running fight has been over how Wyndham Vacation Resorts sells timeshares. Dozens of federal and state suits share the same core allegations: presentations advertised as short but lasting five to eight hours, misrepresentations about resort availability, resale value, rental income, and maintenance fees, and pressure to “upgrade” by buying more points when access problems arise. Plaintiffs in DuBose pointed to evidence that points marketed at $15,500 to $25,000 resold on eBay for about one dollar. Other complaints allege targeting of elderly buyers and altering credit applications without consent.5ClassAction.org. DuBose v. Wyndham Vacation Resorts Inc., Complaint6Reform Timeshare. Timeshare Lawsuits and Pending Actions

The results have mostly favored Wyndham on procedural grounds rather than the merits:

Bedgood and the Arbitration Question

The most consequential timeshare decision was about access to court, not sales conduct. In Bedgood v. Wyndham, owners tried to arbitrate their claims through the American Arbitration Association, but the AAA refused to administer them because Wyndham had not complied with its own consumer arbitration policies. On December 19, 2023, the Eleventh Circuit affirmed a ruling denying Wyndham’s motion to compel arbitration. The court held that Wyndham was “in default” under Section 3 of the Federal Arbitration Act because its chosen forum had rejected the cases, and that Wyndham could not claim to be the “aggrieved” party under Section 4 when the consumers had actually tried to arbitrate.11FindLaw. Bedgood v. Wyndham Vacation Resorts Inc.

The court carved out two plaintiffs whose contracts were with separate Wyndham entities, Wyndham Resorts Development Corporation and WorldMark, the Club, remanding their claims because the record did not show the AAA had rejected those entities.11FindLaw. Bedgood v. Wyndham Vacation Resorts Inc. Back in the Middle District of Florida, a bench trial was scheduled for December 17, 2025. The parties notified the court of a settlement on December 12, 2025, and the case closed without trial. Settlement terms are not in the public record.12PACER Monitor. Bedgood v. Wyndham Vacation Resorts Inc.

State Attorney General Actions

State regulators have brought their own cases against Wyndham and its predecessors, and those have generally produced money and injunctive relief.

In 2003, the California Attorney General and the San Mateo County District Attorney sued Wyndham predecessor Trendwest Resorts over deceptive sales and interference with contract cancellation rights. The settlement included an injunction, rescission offers to affected consumers, and $795,000 in civil penalties, with a total estimated value of $4.3 million.13ClassAction.org. Deneen v. Wyndham Vacation Resorts Inc., Complaint

In 2014, New York Attorney General Eric Schneiderman reached an agreement requiring Wyndham to stop offering reservation certificates for a Manhattan hotel called “Midtown 45” until it filed a proper offering plan under New York’s Martin Act. The concern was that some consumers who received the certificates believed they were buying an ownership interest, which they were not.14ABA Journal. New York Attorney General Reviews Timeshare Practices

Wisconsin’s Department of Agriculture, Trade and Consumer Protection sued in 2015 over misrepresented “one day only” gift incentives and undisclosed sales intent. The settlement provided $665,000 in restitution to 29 affected owners, a $99,520 civil fine, and roughly $62,700 in fees and costs.13ClassAction.org. Deneen v. Wyndham Vacation Resorts Inc., Complaint

The Williams Whistleblower Verdict

Patricia Williams, a former Wyndham Vacation Ownership sales representative, said she was fired in December 2010 after complaining seven times about deceptive practices, including a misrepresented “buyback program” for timeshare points and signing customers up for credit cards without their knowledge. At trial in San Francisco Superior Court in November 2016, the jury heard evidence about internally named “TAFT Days,” short for “Tell Them Any Frigging Thing,” reportedly invoked when sales lagged. It awarded Williams more than $20 million, including $18.57 million in punitive damages.15SFGate. Fired Wyndham Timeshare Fraud Whistleblower Gets $20M16Timeshare Law Library. Williams v. Wyndham

The court denied Wyndham’s motion for a new trial, calling the company’s conduct “highly reprehensible,” but reduced the punitive damages to $12.8 million on due process grounds.16Timeshare Law Library. Williams v. Wyndham

The WorldMark Settlement

WorldMark vacation credit owners sued Wyndham Resort Development Corporation in 2007 in the Northern District of California, alleging mismanagement of the WorldMark timeshare system. Wixon v. Wyndham resolved on a class-wide basis, but instead of cash payments the settlement imposed structural changes. Wyndham agreed to cancel up to 274.7 million unsold developer vacation credits and their associated voting rights, reduce credit values at 12 resorts, remove 400 to 481 underutilized units from the system while absorbing their maintenance costs, and limit corporate marketing use of WorldMark resorts during peak periods. Wyndham also agreed to pay up to $5 million toward plaintiffs’ attorneys’ fees and costs. A related derivative action addressed governance, including the appointment of an independent director to the WorldMark board and new proxy-voting rules.17GovInfo. Wixon v. Wyndham Resort Development Corp., Settlement Documents18Class Law Group. WorldMark Settlement Notice

Wyndham as Plaintiff: Suits Against Timeshare Exit Firms

Wyndham has also gone on offense against companies that market timeshare cancellation services. In August 2024, Judge Wendy Berger of the Middle District of Florida entered a $16.1 million default judgment for Wyndham Vacation Ownership against Rich Folk, William Wilson, Pandora Servicing LLC, and Intermarketing Media LLC. The court found the defendants had run a “sophisticated advertising campaign” falsely claiming they could cancel Wyndham contracts and issued a permanent injunction against further such advertising. A prior verdict in the same case had already been entered against co-defendant attorneys after a bench trial.19Shutts & Bowen. Shutts and Bowen Litigation Team Secures $16 Million Award20Law360. Wyndham Timeshare Poachers Owe $16M, Judge Says

Sex Trafficking Cases Against Wyndham

Wyndham has also faced lawsuits under the Trafficking Victims Protection Reauthorization Act arguing that hotel franchisors are liable for trafficking that occurs at franchisee-run properties. Results have gone both ways. In April 2024, a judge in the Northern District of Ohio granted Wyndham and co-defendants summary judgment, finding the franchisors “several steps removed” from daily hotel operations and not sufficiently involved to be liable.21FindLaw. S.C. v. Wyndham Hotels and Resorts Inc.

In September 2025, a judge in the Southern District of Ohio denied Wyndham’s summary judgment motion in a separate trafficking case, allowing it to move toward trial.22Buchalter. M.A. v. Wyndham Hotels and Resorts Inc. In March 2026, an anonymous plaintiff sued in the Southern District of Texas, alleging trafficking at several Houston-area hotels including Wyndham-branded properties and claiming the hotels knew of trafficking activity and failed to comply with a Houston ordinance requiring human trafficking training.23Houston Public Media. Houston Hotels Lawsuit Alleges Human Trafficking

Facebook Pixel Mass Arbitration Investigation

As of early 2026, attorneys are investigating Wyndham Hotel Group over its alleged use of the Meta pixel on WyndhamHotels.com. The investigation alleges the tool transmits user data to Meta for advertising without consent, including hotel reservation details, search and browsing history, information entered on the site, and the user’s unique Facebook ID, which can tie activity to a specific Facebook profile. Because Wyndham’s terms include a class action waiver and arbitration clause, the effort is proceeding as a mass arbitration investigation rather than a class action. It focuses on people with a Facebook account who booked travel through WyndhamHotels.com in the year before March 2026.24ClassAction.org. Wyndham Facebook Data Sharing Investigation