When the Front Desk Hands a Stranger the Key to Your Room: How Iowa Hotel Negligent Security Law Works
The phone rings at 2 a.m. The person on the other end is telling you they were raped inside the very room the hotel rented them. The lock on the door did not hold. The man who climbed into the bed had a key the front desk gave him. The hotel’s own maintenance worker had disabled the safety latch the night before. You are not imagining what went wrong here. You are describing every single failure negligent security law was built to address.
We are Attorney911 — The Manginello Law Firm, PLLC — and we represent survivors of sexual assault and violent crime in Iowa and across the country. We built this page for the woman who is reading this at 2 a.m., for the family member who flew in after the call from the hospital, and for every survivor who has been told that what happened was “just bad luck” and that the hotel had no duty. That is not the law. The law in Iowa, and the law of premises liability nationwide, has protected people like you for a very long time. We exist to put that law to work in your case.
This page walks through, in plain English, what an Iowa hotel negligent security claim looks like after a sexual assault, who can be held responsible, what evidence you must protect in the first 72 hours, how the insurance company will try to settle the case for pennies, and what your case is realistically worth. We name the laws, we name the defendants, and we name the plays the other side will run against you. Nothing on this page is general legal information lifted from a brochure. Every paragraph comes from what we know about how these cases are actually built, tried, and won in Des Moines and across Iowa.
Who We Are — and Why It Matters That Both of Us Have Done This
This is not a 1-800-mill. When you call us at 1-888-ATTY-911, you reach a live person at our firm, twenty-four hours a day, every day. If we are the right fit for your case, we will tell you. If we are not, we will help you find a lawyer who is. That is how this firm has operated since July 18, 2001.
Our firm is led by Ralph P. Manginello. Ralph has been a Texas trial lawyer for 27+ years, since being admitted to the Texas Bar on November 6, 1998. He has tried cases in both state and federal court, including the U.S. District Court for the Southern District of Texas. He earned his J.D. from South Texas College of Law Houston in 1998 and his B.A. in Journalism & Public Relations from the University of Texas at Austin. Before law school, Ralph was a journalist — he knows how to take a fact pattern apart, how to find the document that breaks a case open, and how to tell a jury’s story. He is a member of the State Bar of Texas, the Houston Bar Association, the Harris County Criminal Lawyers Association, the Texas Trial Lawyers Association, the National Association of Criminal Defense Lawyers, the Pro Bono College of the State Bar of Texas, the Trial Lawyers Achievement Association (Million Dollar Member), and the National Association of Italian Lawyers. He is rated “Excellent” (8.2) on Avvo with a 5.0 client-review score.
Our associate attorney is Lupe Peña. Lupe was admitted to the Texas Bar on December 6, 2012 (13+ years licensed) and is also admitted to the U.S. District Court for the Southern District of Texas. He earned his J.D. from South Texas College of Law Houston in May 2012 and his B.B.A. in International Business from Saint Mary’s University in San Antonio in 2005. He is a third-generation Texan with family roots to the King Ranch, born and raised in Sugar Land. Here is what makes Lupe different, and why it matters to your case: before he joined our firm, Lupe spent years as an insurance-defense attorney at a national defense firm. He sat in the rooms where adjusters and their software decided how to deny, delay, and devalue claims exactly like yours. He knows the Colossus and reserve-setting programs. He knows how IME doctors are selected and how surveillance is used. He now uses that insider knowledge for the people those systems were built to defeat. Lupe is fully bilingual and conducts full client consultations in Spanish without an interpreter.
We have recovered $50,000,000+ across the firm’s history, including a $5M+ brain-injury settlement, a $3.8M+ amputation settlement, a $2.5M+ truck-crash recovery, and a $2M+ maritime back-injury settlement. We carry a 4.9-star Google rating across 251+ reviews. We do not advertise a result we cannot document. Past results depend on the facts of each case and do not guarantee future outcomes.
Our work spans every category of catastrophic injury — brain injuries, workplace accidents, refinery explosions, offshore injuries, construction falls, toxic exposures, and wrongful death. A negligent security case against a hotel sits at the intersection of several of those categories — it is a premises liability case that frequently carries a brain injury / PTSD component, and it requires the same kind of evidence discipline we use in commercial-truck and refinery cases. The skills transfer directly.
Who Can Be Sued: The Defendant Map in an Iowa Hotel Negligent Security Case
A hotel sexual assault case almost never has a single defendant. There is always a corporate stack, and the people with the money to pay a verdict are usually not the people whose name is on the front of the building. We lay the stack out below so you understand who you are actually suing when you file a negligent security claim in Iowa.
The Property Operator
The hotel property in Des Moines was operated by Hammons Inc. and Atrium TRS III, the named defendants in the Des Moines case who remained in the lawsuit after the franchise entities were dismissed. The operator is the entity that hired the front desk staff, trained (or failed to train) the maintenance crew, set the key-issuance policy, and decided whether to install a working surveillance system. When a jury finds a hotel negligent, it is finding the operator negligent. The operator is the entity whose commercial general liability policy and excess/umbrella tower are first in line to pay any verdict.
The Brand / Franchisor (Why the Brand Matters Even When Dismissed)
Embassy Suites is a Hilton Worldwide brand. In the Des Moines case, both the franchise and Hilton Worldwide were dismissed from the lawsuit before trial. That dismissal is meaningful and we tell you about it because it shows you what an insurance-defense team will try to do in your case too. The brand’s argument is that it is a licensor of trademarks and quality standards, not the entity that runs the front desk on the night of the assault. In many states, that argument wins.
In other states, and in other fact patterns, that argument loses. If the brand dictated the key-issuance procedure, the training curriculum, the surveillance standards, or the response protocol to security incidents, a jury can find the brand directly liable for negligent training and supervision. The Hilton hotels that operate as corporate-owned, full-service properties rather than franchises carry the deepest exposure of all. We will not promise you a win against the brand, but we will not let the brand’s lawyer escape the courtroom on the strength of a slogan if the underlying conduct supports a claim.
The Individual Staff Members
The front desk clerk who issued the duplicate key and the maintenance worker who bypassed the safety latch are individuals, not just employees of the hotel. In some cases, naming them as individual defendants — particularly where their conduct was clearly outside the scope of their training or where the hotel itself has disclaimed responsibility — creates a path to a verdict and to a separate insurance tower (often a personal excess or umbrella policy carried by the individual). We name individual staff when the facts support it and when the strategic benefit justifies it. We do not name them reflexively, because naming every employee in every case is a defensive move that can backfire.
The Attacker (Civil Claim Against the Criminal)
The attacker himself is also a civil defendant. In most cases he is judgment-proof — he is going to prison and has no assets. But there are two reasons to name him anyway. First, a default judgment against him is part of the paper trail that proves the assault happened and that the hotel’s security failure was the proximate cause of the harm. Second, if the attacker has any future assets, the judgment attaches. A lawyer who fails to name the attacker leaves that option on the table.
The Insurance Carrier (Behind Every Defendant)
Behind every defendant is an insurance carrier with a commercial general liability (CGL) policy, often with excess or umbrella layers stacked above. For a hotel sexual assault case in Iowa, the relevant insurance tower is usually: a primary CGL on the property; an excess/umbrella layer above; possibly a separate sexual-assault-and-molestation endorsement or sublimit; and the individual staff members’ personal excess policies. Some CGL policies contain assault-and-battery exclusions that the carrier will try to invoke. We anticipate that fight on day one and build the case to defeat it. Even when exclusions apply, the carrier can still owe defense costs and a reservation of rights can leave coverage in play for negligent hiring, negligent training, and negligent supervision claims — which are the theories we plead in addition to the direct negligent-security claim.
The Evidence That Wins or Loses Your Case — and How Fast It Disappears
The single most important piece of advice we can give you on this page is about evidence. In every negligent security case, the proof is on a clock — and the clock is short. We send a preservation letter to the hotel, the brand, the individual staff members, the security vendor, and any third-party surveillance company within days of being retained. We do not wait to confirm we are taking the case. We do not wait to file suit. We send the letter while you are still deciding whether to hire us. If you call us at 1-888-ATTY-911 today, the preservation letter goes out tomorrow.
Surveillance Video (CCTV)
Hotel surveillance cameras are the single most important piece of evidence in a negligent security case. The Des Moines case would not exist as a civil case without the lobby and hallway cameras. But hotel cameras do not keep their footage forever. Most hotels retain surveillance for thirty days, some for less, and some for more. The retention policy is typically set by the property or by the brand’s standards, and it is rarely the subject of any law. The footage rolls over. It is gone. The preservation letter freezes it. Without the letter, the hotel will say “we have no record of that night” within thirty days of your call.
Key-Card Logs and Property Management System (PMS) Records
Every modern hotel records every keycard swipe, every room entry, and every guest folio in its property management system. Those records are the paper trail that proves the attacker was in the building, when, how often, and which doors he opened. They also show who was on shift at the front desk, which maintenance worker was on duty, and what the room status was at every point during the night. PMS records typically have a longer retention than video, but they are still subject to routine purging. Preservation locks them in.
Housekeeping and Maintenance Logs
A hotel runs on a chain of internal logs: housekeeping sheets, maintenance work orders, incident reports, security shift reports. In the Des Moines case, the maintenance work order that documented the safety-latch bypass was a critical piece of evidence. These logs are written contemporaneously by the people who did the work. They are far more reliable than the memories of the same people months or years later. They are also routinely discarded on short retention cycles. We demand them in the preservation letter by name.
Police Reports and 911 / CAD Records
The police investigation generates a report. The 911 call center generates audio recordings and computer-aided dispatch (CAD) records. These are public records in most jurisdictions, and they corroborate the timeline, the location, the caller’s identity, and the responding officer’s observations. Iowa police records can be requested through the Des Moines Police Department’s records division or through the Iowa open records process. We pull them in parallel with sending the preservation letter.
Prior Incident History at the Property
To prove foreseeability, we need to know what the hotel knew before your assault. We pull the property’s call-for-service history, prior guest complaints, prior lawsuits or claims, prior settlement agreements (which may be sealed but may still be discoverable), and the property’s own incident reports. This is the documentation that turns a single incident into a pattern — and a pattern is what makes a jury return a verdict that punishes the hotel rather than one that simply compensates the victim.
Internal Training Materials and Policies
The hotel has written policies for key issuance, for ID verification, for safety-latch maintenance, for maintenance staff response to lockout requests, for incident response, and for guest safety. The brand has its own standards manuals. Those documents are the standard of care the hotel set for itself. When a jury sees that the hotel had a written policy that the front desk clerk ignored, the verdict writes itself. We demand the manuals, the training records, the brand standards, and the audit reports that show whether the hotel was actually following its own rules.
The Timeline
A preservation letter typically freezes the following within its first paragraph: “all surveillance footage, key-card access logs, property management system records, guest folios, housekeeping logs, maintenance work orders, incident reports, security shift reports, brand standards manuals, training records, and any other electronically stored information related to the property or to the individuals involved in the incident on [date].” The letter goes to the hotel’s general counsel, the brand’s general counsel, the individual staff members (through their personal counsel if known), the surveillance vendor, and the property management software vendor. It states the litigation hold in plain terms. It demands confirmation of preservation in writing. It identifies the potential spoliation consequences of failure to preserve.
How Long Do You Have? (The Retention Clock Summary)
- Surveillance video: typically 7 to 30 days, sometimes less. Some systems auto-overwrite on a rolling loop.
- Key-card logs / PMS records: variable, often 30 days to several years; depends on the hotel and the brand.
- Housekeeping / maintenance logs: variable; some are monthly, some are quarterly, some are destroyed sooner.
- Police reports: vary by jurisdiction, often 1 to 5 years; CAD audio often shorter.
- Internal training materials: typically 2 to 5 years but vary.
- Internal incident reports: highly variable; some are immediate, some are daily, some are destroyed after a quarter.
The clock is different for each category. The only safe assumption is that everything is at risk, and the only safe move is the preservation letter the day you call.
The Damages: What Your Iowa Hotel Negligent Security Case Is Worth
Every case is different, and no lawyer can give you a number over the phone before reviewing your medical records. But we can give you the framework the jury will be given, the categories of damages an Iowa jury may award, and the realistic range our experience tells us these cases fall into. The honest answer is that hotel sexual assault cases with strong liability (like the Des Moines case) and serious, well-documented injuries (like PTSD with documented treatment and lost wages) typically resolve in the range of $2,500,000 to $7,500,000, with the high end driven by cases involving egregious conduct, severe and lasting PTSD, permanent loss of earning capacity, or death.
The low end of the range, $2.5 million, is what you would expect to see in a case with strong liability but a relatively short treatment course and a survivor who is able to return to work. The high end of the range, $7.5 million, is what you would expect to see in a case with the kind of facts the Des Moines case presented — a hotel that handed a stranger the key and disabled a safety latch — combined with severe PTSD, a long course of treatment, permanent loss of earning capacity, and clear prior knowledge on the hotel’s part that similar risks existed at the property.
The framework the jury will be given is the standard personal-injury framework that applies to every Iowa premises liability case.
Economic damages. These are the damages with receipts. Past medical expenses — including the SANE exam, the emergency room, and all subsequent mental health treatment. Future medical expenses — the cost of the ongoing therapy the survivor will need for the rest of her life, priced by a life-care planner. Past lost wages — what the survivor would have earned from the date of the assault to the date of trial. Future lost earning capacity — what the survivor will be unable to earn for the rest of her working life because of the PTSD. The life-care planner and a forensic economist build these numbers. They are not speculative. They are arithmetic.
Non-economic damages. These are the damages without receipts but with a number. Pain and suffering — past and future. Mental anguish. Loss of enjoyment of life. Loss of consortium, where the survivor’s spouse can make the claim. The damage to the relationships the survivor would have had — with her partner, with her children, with her friends — if the assault had not occurred. In Iowa, these damages are not capped by statute. The jury is free to award the full value of the human loss.
Punitive damages. Iowa recognizes punitive damages in cases where the defendant’s conduct shows a willful and wanton disregard for the rights of others. The Des Moines case is precisely the kind of case where punitive damages are available: a hotel that knew its staff was supposed to verify identity before issuing keys, that knew its maintenance staff was supposed to confirm the occupant’s consent before disabling safety latches, and that did nothing to enforce either rule. A jury that finds those facts may also find that the conduct warrants punishment, not just compensation. Punitive damages are not automatic. They are not guaranteed. They are within the jury’s discretion when the facts support them.
Survival action for wrongful death. If the assault resulted in death, a separate wrongful death claim under Iowa law may be available to the surviving family. The framework is similar to a personal-injury case, with the wrongful death claim belonging to the personal representative of the estate on behalf of the statutory beneficiaries. The case value range is the same, plus the wrongful-death-specific damages (loss of financial support, loss of services, loss of consortium). We work with the family through a probate proceeding to appoint the personal representative if one has not already been appointed.
Structured settlements and tax. A structured settlement can convert a lump sum into a stream of tax-free payments over the survivor’s lifetime. The right structure protects the recovery, ensures the survivor has income for life, and can be tailored to fund specific future medical and living-expense needs. We work with structured-settlement consultants to design the right structure for each case. Compensation for personal physical injury is generally not taxable under federal law, though punitive damages and pre-judgment interest are. We bring in a tax advisor at the right moment so the survivor understands the full picture.
The Federal Hook: TVPRA and the Long Statute of Limitations for Trafficking-Related Cases
If the facts of your case include any element of sex trafficking — if the attacker brought other victims to the hotel, if the hotel profited from a trafficking venture, if the hotel knew or should have known that the room was being used for commercial sexual activity — a separate federal claim may be available under the Trafficking Victims Protection Reauthorization Act (TVPRA), codified at 18 U.S.C. § 1595.
The federal TVPRA claim runs in addition to the Iowa state-law negligent security claim, and it has a critical advantage: the federal statute of limitations is ten years from the date the cause of action arose, or ten years after the victim turns 18 if the victim was a minor at the time. That is materially longer than Iowa’s two-year state-law personal-injury deadline. The two claims can be pleaded together, and the federal claim can survive in cases where the state-law claim is otherwise time-barred.
The TVPRA also includes a unique “knowingly benefits” theory that reaches beyond the negligent security framework. Under 18 U.S.C. § 1595(a), a victim can sue not only the trafficker but anyone who “knowingly benefits, financially or by receiving anything of value, from participation in a venture which that person knew or should have known has engaged in an act in violation of this chapter.” A hotel that rents rooms to a known trafficker — with cash payments, with refusals of housekeeping, with a parade of different visitors — is a venture participant in the federal statute’s sense. A brand that licenses a flag to a hotel that engages in that pattern is a candidate for the same theory.
We do not bring a TVPRA claim in every hotel sexual assault case. We bring it where the facts support it. The Des Moines case was a single-assault case against a hotel operator and resolved in a confidential settlement. Some cases present trafficking patterns that change the entire legal theory. We evaluate every case for both the Iowa state-law negligent security claim and the federal TVPRA claim, and we pursue whichever (or both) fit the facts.
Why Acting Now Matters: The 72-Hour Roadmap
If you or a loved one has been sexually assaulted at a hotel in Des Moines or anywhere in Iowa, the next 72 hours matter more than the next 72 weeks. Here is the roadmap we give every new client on day one.
Hour 0 to 12. Seek medical care. If you have not already, go to a hospital with a SANE program and request a forensic exam. Do not shower, do not change clothes, do not eat or drink, and do not clean the room. Preserve every piece of evidence. Save every text, every call log, every social media message related to the attack.
Hour 12 to 24. Report the assault to law enforcement. The Des Moines Police Department and the Polk County Sheriff’s Office take these reports seriously. Cooperate fully, but do not speculate about what happened, and do not minimize. Save the case number.
Hour 24 to 48. Call us at 1-888-ATTY-911 for a free, confidential consultation. Do not give a recorded statement to the hotel’s insurance carrier before speaking to us. Do not sign anything the carrier sends. Do not let the hotel’s management “help” you understand what happened.
Hour 48 to 72. We send preservation letters to the hotel, the brand, the security vendor, the property management software vendor, and the individual staff members. We open the insurance tender process. We begin the medical-records collection. We begin the discovery process that will build the case over the next twelve to twenty-four months. The clock is running. The evidence is disappearing. We start the case the day you call.
The consultation is free. The advice is real. There is no obligation, and no fee unless we win.
Why This Firm Is Built for Cases Like Yours
We have built this firm around the kind of case you are now reading about. A hotel sexual assault case is a brain injury case (the PTSD is the injury), a premises liability case, an evidence-preservation case, a coverage-tower case, and a jury-presentation case. We do all of those things in this firm.
Ralph Manginello has spent 27+ years in courtrooms, including federal court, and has tried cases against the largest insurance carriers and corporate defendants in the country. He knows how a jury hears a case. He knows what a jury needs to see. He knows how to build the document trail that makes a settlement negotiation move.
Lupe Peña spent years as an insurance-defense attorney at a national defense firm. He sat in the rooms where adjusters, IME doctors, and surveillance contractors were selected. He sat in the rooms where Colossus and reserve-setting software priced claims like yours. He now uses that insider knowledge to build the cases that defeat those systems. He is fully bilingual — we serve you fully in English and en Español.
We have a 4.9-star Google rating across 251+ reviews. We have recovered $50,000,000+ across the firm’s history. We do not promise outcomes — past results depend on the facts of each case and do not guarantee future outcomes — but we do promise the work. The free consultation is real. The no-fee-unless-we-win promise is real. The 24/7 live staff is real. The hotline number is real. 1-888-ATTY-911.
The Single Most Important Sentence on This Page
If you take nothing else from this page, take this. If you or a loved one has been sexually assaulted in a hotel in Iowa, the most important thing you can do in the next 24 hours is call us at 1-888-ATTY-911. Do it from the hospital if that is where you are. Do it from a parking lot if that is where you feel safe. Do it from the bed you cannot sleep in. The evidence is disappearing. The insurance company has already started building its defense. The clock is running. We will talk to you for free, we will tell you the truth about your options, and if we take your case, we will work it until the last piece of evidence is frozen, the last deposition is taken, the last expert report is filed, and the last dollar is recovered or the last jury verdict is read.
Hablamos Español. Llámenos al 1-888-ATTY-911.
Free consultation. No fee unless we win. 1-888-ATTY-911. Contact us now.
The Manginello Law Firm, PLLC. Attorney911. 24/7 live staff. Since 2001.