A federal judge in Newark has ruled that the Wyndham hotel chain and its three subsidiaries are all on the hook in a suit by the Federal Trade Commission over the failure of one subsidiary to safeguard customers’ personal data.

The FTC made sufficient allegations to support a common-enterprise theory of joint and several liability, since the various Wyndham entities are under common control, pool their resources and staff and share office space, U.S. District Judge Esther Salas ruled Monday in Federal Trade Comm. v. Wyndham Worldwide Corp.