A hotel is not automatically responsible because an assault happened on its property. But a hotel that hands out room access carelessly, ignores warning signs, hires or keeps a dangerous employee, or looks away from trafficking can be held responsible in a civil case. That case is separate from the claim against the attacker, it runs on a different deadline, and it is often the claim that actually pays for the harm.

The person who attacked you is one defendant. The company that let it happen can be another, and it usually has insurance.

What Does a Hotel Owe Its Guests?

The law has long treated hotels differently from other businesses. A guest sleeps there, behind a door the hotel controls, with a key the hotel issues. In Virginia D. v. Madesco Investment Corp., the Supreme Court of Missouri reinstated a jury’s verdict for a woman sexually assaulted by an intruder in a hotel’s ladies’ restroom, and the lead opinion described the relationship between hotel operators, which the law has traditionally called innkeepers, and their guests as a special one (648 S.W.2d 881, Mo. banc 1983).

Five years later, the same court set out the general rule for businesses. Ordinarily there is no duty to protect customers from crimes by unknown strangers. But special facts change that, including prior incidents of violent crime on the premises that made another attack foreseeable (Madden v. C & K Barbecue Carryout, Inc., 758 S.W.2d 59, Mo. banc 1988).

In plain words, the question in a hotel case is what the hotel knew, or should have known, and what it did about it. The answer depends on who the attacker was.

  • An employee. The focus is on how the hotel hired, screened, supervised and kept that person, and what access the job gave them.
  • Another guest. The focus is on what the staff saw or were told before the assault, and whether they acted on it.
  • An intruder. The focus is on how the person got in: unlocked side doors, a key handed out without ID, no one watching the cameras, and earlier crimes at the property.

What Is Negligent Security?

Negligent security means the hotel failed to take reasonable steps to keep guests safe from a danger it knew about or should have seen coming. It is a claim about the hotel’s own conduct, not the attacker’s.

In a hotel, that usually comes down to a short list of things:

  • Doors that are supposed to lock and do not, or side and stairwell entrances propped open.
  • Cameras that are broken, unmonitored, aimed at nothing, or recording over themselves before anyone looks.
  • No security staff, or one overnight clerk covering the desk, the phones and the whole building.
  • A history of police calls, assaults, drug activity or prostitution at the property that management knew about and did nothing to address.
  • Guest complaints about a person, a room or a floor that went nowhere.

Prior incidents matter most. A property with a record of violent crime, and a manager who knew it, is in a very different legal position from one with a clean history.

What if a Hotel Employee Assaulted Me?

Then the hotel’s decisions about that employee are part of the case. Missouri recognizes claims for negligent hiring, negligent retention and negligent supervision. Each one asks a different question.

  • Negligent hiring: did the hotel, or the staffing company that placed the worker, do a background check that would have revealed a danger?
  • Negligent retention: after complaints or warning signs, did the hotel keep the employee on anyway?
  • Negligent supervision: did the hotel let the employee move through guest floors, enter rooms or work alone at night without oversight?

Housekeepers, maintenance workers, night auditors, security guards and front desk clerks all have access that ordinary members of the public do not. The more access a job gives, the more care the hotel must take with who holds it. Many hotels use outside contractors for security and staffing, so the employer on paper may be a different company with its own insurance.

Who Had a Key to the Room?

Nearly every hotel door today runs on an electronic lock. Each lock keeps an audit trail: which card opened it, at what minute, and whether that card was a guest key, a housekeeping key, a maintenance key or a master. The front desk system records who made each card and when.

That record can answer the most important question in the case. Did someone use a staff card to enter while you were inside? Did the desk issue a duplicate key to a stranger who claimed to be your companion, without checking ID? Was a master key missing, shared, or left unaccounted for?

Key control policies, and whether anyone followed them, are a core part of a hotel investigation. So is the lock audit itself, which is stored in the lock or the hotel’s software and can be overwritten as new entries pile up.

How Long Do I Have to File? Two Deadlines, Not One

Missouri gives you two years to sue the person who assaulted you for assault or battery (RSMo 516.140). It gives you five years to sue the hotel, or a staffing or security company, for its own negligence, because that is an “injury to the person” claim under the general statute (RSMo 516.120(4)).

That split matters. Many survivors are not ready to talk about what happened for a long time. By the time they are, the two-year deadline against the attacker may have passed. The claim against the hotel may still be open. Do not assume that because one door has closed, every door has.

Two years against the attacker. Five years against the hotel. Ten years under federal law if you were trafficked. Do not let anyone tell you it is too late before a lawyer has looked at the dates.

If you were under 18

Missouri has a separate statute for childhood sexual abuse. A claim must be filed within ten years after the survivor turns 21, or within three years after the survivor discovers, or reasonably should have discovered, that an injury was caused by the abuse, whichever is later (RSMo 537.046). That statute is written for claims against the person who committed the abuse. For a claim against the hotel, Missouri generally pauses the five-year clock until the survivor turns 21 (RSMo 516.170). Which rule controls a particular claim can be contested, so plan around the earlier date.

What if I Was Trafficked at a Hotel?

Federal law gives trafficking survivors their own civil claim, and it reaches more than the trafficker. Under 18 U.S.C. § 1595(a), a survivor may sue anyone who knowingly benefits, financially or by receiving anything of value, from participating in a venture that person “knew or should have known” was engaged in trafficking. For a hotel, the benefit is usually room revenue. The question is what the staff saw: the same rooms rented night after night for cash, a stream of visitors, a young person who never left, a missing-child alert.

The deadline is ten years from when the claim arose, or ten years after the survivor turns 18 if the survivor was a minor, whichever is later (18 U.S.C. § 1595(c)). These claims are filed in federal court.

Survivors have been bringing these claims against hotel owners and brands across the country. In July 2025, a federal jury in Atlanta returned verdicts of $10 million in compensatory damages and $30 million in punitive damages against the owner of a Decatur, Georgia motel, for a survivor trafficked there as a teenager (J.G. v. Northbrook Industries, Inc., No. 1:20-cv-05233, N.D. Ga.). The owner has asked the judge to set the verdict aside, and that motion was still pending in October 2026. In March 2026, the federal appeals court in Atlanta revived related claims by other survivors against the same owner, holding that they had enough evidence to put their claims before a jury (G.W. v. Northbrook Industries, Inc., 11th Cir. 2026).

Whether the national brand on the sign can also be liable depends on how much control the brand had over the hotel’s operations, and courts have reached different results. One federal court in Pennsylvania let a survivor’s claim against a hotel franchisor go forward in 2025 because the complaint alleged the brand controlled staffing, training and day-to-day operations (A.B. v. Wyndham Hotel & Resorts, Inc., No. 3:24-cv-01588, M.D. Pa. 2025).

Missouri law also has a civil remedy, but it is narrower. A trafficking victim may sue a person who pleads guilty to or is found guilty of a Missouri trafficking offense, for actual damages, attorney’s fees and punitive damages, within ten years after the later of the final order in the criminal case, the victim’s emancipation from the defendant, or the victim’s eighteenth birthday (RSMo 566.223.6). Because it requires a conviction, the federal claim is usually the path against a hotel.

Which Evidence Disappears First?

Hotels create records every hour. Most are kept only as long as the hotel’s own policy says, and then they are deleted, recorded over or thrown out. A preservation letter, sent early, puts the hotel and its insurer on notice that the records must be kept.

  • Electronic lock audits and key-card issuance logs.
  • Surveillance video from hallways, elevators, lobbies, parking lots and entrances. Many systems record over themselves on a fixed cycle.
  • Incident reports, guest complaints and the manager’s log for the night.
  • Staffing schedules, time records and the identity of every worker on duty, including contractors.
  • Personnel files, background checks and prior discipline for the employee involved.
  • Reservation, payment and registration records for the room and the rooms around it.
  • Prior police calls to the property.

That last item is often the most powerful, because it shows what the hotel knew before you ever checked in. Calls for service and incident reports are held by the police agency, not the hotel: the St. Louis Metropolitan Police Department for a hotel in the city, and the St. Louis County Police Department or the municipal department for a hotel in the county. In Missouri, police incident reports are open records (RSMo 610.100.2), and a person involved in an incident, or that person’s lawyer, may request closed investigative records for use in a civil claim (RSMo 610.100.4).

Will My Name Be Public, and Do I Need a Police Report?

You do not need a police report, criminal charges or a conviction to bring a civil negligence claim against a hotel, or a federal trafficking claim. A criminal case is brought by the state and asks whether someone should be punished. A civil case is brought by you and asks who is responsible for the harm and what they owe. The two can run at the same time, one after the other, or one without the other.

Privacy is a real concern, and there are tools for it.

  • Courts can allow a survivor to proceed under a pseudonym such as Jane Doe, or by initials. Federal trafficking cases are routinely filed that way.
  • Missouri law directs that information in any court record that could identify or locate the victim of a sexual offense be closed and redacted before the record is disclosed to the public (RSMo 595.226).
  • Protective orders can limit who sees medical records, counseling records and other sensitive material produced in the case.
  • Many cases resolve without a public trial.

Nothing is filed without your agreement, and we explain the privacy options before any decision is made.

What Can a Civil Case Pay For?

A civil claim seeks compensation for what the assault took from you. Depending on the facts, that can include:

  • Medical care, including emergency treatment, testing and follow-up.
  • Counseling and psychological treatment, now and in the future.
  • Lost wages, and lost earning capacity if the harm affects your ability to work.
  • Pain, fear, humiliation, and the loss of the life you had before.
  • Punitive damages, in some cases, when a defendant’s conduct was especially reckless.

There is no standard amount. Every case turns on its own facts, its own evidence and the defendants involved.

What Happens When You Call The Injury Counsel

David Gregory of The Injury Counsel secured a $27 million verdict in a hotel assault case. Every case is different, and that result is not a prediction about yours.

What it reflects is a way of working. We find out who owns the hotel, who operates it, who staffs and secures it, and which brand is on the sign. We send preservation letters for the lock audits, the video and the staffing records. We request the police history for the property. We identify every insurance policy that may apply. And we tell you plainly which deadlines apply to you.

You do not need to know whether you have a case before you call. Call The Injury Counsel at (314) 727-7220 for a free, confidential consultation.