24/7 LIVE STAFF — Compassionate help, any time day or night
CALL NOW 1-888-ATTY-911
Blog |

Hotel Sexual Assault & Negligent Key Control Lawsuit in Des Moines, Iowa — Attorney911 Holds the Hotel Management Company and Its Corporate Owner for Handing a Stranger a Room Key Without ID Check, Ralph Manginello’s 27+ Years of Federal-Court Trial Practice, Lupe Peña the Former Insurance-Defense Attorney Who Knows How the Claims Machine Undervalues These Cases, We Preserve the Electronic Lock Audit Trail Before It Is Purged, Iowa’s Premises Liability Law and the Foreseeability of Prior Security Breaches, the Firm Has Recovered Millions for Catastrophic Injury Victims — Free 24/7 Consultation, No Fee Unless We Win, Hablamos Español, 1-888-ATTY-911

June 22, 2026 26 min read
Hotel Sexual Assault & Negligent Key Control Lawsuit in Des Moines, Iowa — Attorney911 Holds the Hotel Management Company and Its Corporate Owner for Handing a Stranger a Room Key Without ID Check, Ralph Manginello's 27+ Years of Federal-Court Trial Practice, Lupe Peña the Former Insurance-Defense Attorney Who Knows How the Claims Machine Undervalues These Cases, We Preserve the Electronic Lock Audit Trail Before It Is Purged, Iowa's Premises Liability Law and the Foreseeability of Prior Security Breaches, the Firm Has Recovered Millions for Catastrophic Injury Victims — Free 24/7 Consultation, No Fee Unless We Win, Hablamos Español, 1-888-ATTY-911 - Attorney911

You Checked In. You Locked the Door. Someone Else Had the Key.

If you were sexually assaulted in a Des Moines hotel room after a stranger was handed your room key without anyone checking an ID, you already know what no brochure will tell you. The lock on the door meant nothing. The safety bolt meant nothing. The trust you placed in a name on the building meant nothing. What you lived through, and what you have carried since, is the harm the hotel was paid to prevent.

We built this page for one person: the survivor or the family member reading at 2 a.m. with shaking hands, looking for someone in Iowa who will tell the truth about what happened, what the law actually does, and what comes next. We are Attorney911 — The Manginello Law Firm, PLLC. We handle premises-liability and sexual-assault civil claims in Iowa. Below we walk you through the entire case, the law, the defendants, the proof, and the clock — in plain English, with the legal seams dissolved. Nothing here is a sales pitch. It is a map of the road in front of you, written by trial lawyers who have walked it.

If you are not ready to read the whole page, the three things to know right now are: (1) Iowa gives you a limited window to act, and the proof in your case is on a clock far shorter than the deadline; (2) the hotel on the sign is rarely the only company that owes you — there is a franchisor, an operator, and an owner, and we name them all; (3) the call to our firm is free, in English or Spanish, 24/7, and we don’t get paid unless we win your case. 1-888-ATTY-911.

The Three Defendants You Probably Don’t Know You’re Suing

When you were assaulted in an Embassy Suites by Hilton, three different companies may have profited from your stay. The hotel industry has built a layered corporate structure precisely so each layer can point at the others when something goes wrong. We work to make sure all three are named, served, and answerable.

The brand on the sign: Hilton Worldwide Holdings Inc. Embassy Suites is one of Hilton’s flagship brands. Hilton licenses the name, the reservation system, the loyalty program, and the brand standards. Hilton sets the key-control policies that the franchise agreement is supposed to enforce. The Hilton brand told you this was a safe, controlled, professional lodging experience — and that representation is part of the duty it can owe you, even when the local hotel is owned and operated by someone else. Hilton Worldwide Holdings Inc. is a publicly traded parent that can answer for its franchising decisions.

The operator: John Q. Hammons Hotels & Resorts. John Q. Hammons was one of the largest independent hotel operators in the country. At the Des Moines Embassy Suites, the company that hired the front-desk staff, ran the training (or failed to), and wrote the daily procedures was John Q. Hammons. The employee who handed out your key without checking ID was a John Q. Hammons employee. Under Iowa agency law, the operator is the entity whose own negligence is most directly provable — the employer that was supposed to be the eyes and ears of the property on the night you were assaulted.

The owner: Atrium Hospitality. Atrium Hospitality is the property owner. In Iowa premises-liability law, the property owner often carries a non-delegable duty to the guest — the duty to keep the premises safe cannot be contracted away to a third-party manager. The owner collects the rent, holds the real estate, and ultimately answers for the condition of the building and the safety systems that were in place — or that should have been.

This is the shell game of modern lodging. The brand points at the operator. The operator points at the brand. The owner points at everyone. The survivor is left holding the damage. We refuse to let the case stay contained in any one of those shells. Every complaint we file names the brand, the operator, and the owner — and we let each defend on the same playing field where the duty was created.

Iowa’s Deadline — and the Discovery Rule

Iowa’s general personal-injury statute of limitations is two (2) years from the date the cause of action accrues. Iowa Code § 614.1(2). In a hotel sexual-assault case, that clock is the most important number on this page, with one critical exception.

Sexual assault trauma does not always announce itself. The injury is often psychological before it is named. Survivors who minimize what happened, who dissociate, who carry the harm silently for months or years before they can name it, can find themselves at the wrong end of a two-year clock. Iowa recognizes a discovery rule in appropriate cases — the cause of action does not accrue, and the clock does not begin to run, until the plaintiff discovers or in the exercise of reasonable diligence should have discovered the injury and its cause. We will work with you to identify the date Iowa law treats as your accrual date, because the answer can mean the difference between a live case and a barred one.

The second clock — and the one most survivors never hear about — is the evidence clock. The hotel’s surveillance video, key-card logs, front-desk records, housekeeping logs, and incident reports can legally disappear on a cycle far shorter than two years. We discuss that in the next section, because the evidence is the single biggest reason to call us today rather than next month.

If you are reading this and wondering whether you have already waited too long, please call. 1-888-ATTY-911. The consultation is free, and we will tell you honestly whether the window is still open.

The Insurance-Industry Playbook We Expect to Face

The hotel’s insurer will deploy a predictable set of moves the moment you file a claim. Each one has a counter, and the counter is what makes a case winnable.

The first play is the recorded-statement request. A friendly adjuster will call, often within days of the incident, and ask for a recorded statement. The framing is always sympathetic: “We just want to understand what happened.” The purpose is to lock in a single narrative before your memory has fully returned, before you have spoken to a lawyer, and before you understand the full scope of your damages. The counter: do not give a recorded statement without counsel. A single unguarded statement can be used to attack the parts of your memory that any trauma survivor struggles with — fragmented recall, gaps in time, difficulty with sequence — and to argue inconsistency with the hotel’s own records. Tell the adjuster you will speak once you have counsel present, and we will be there.

The second play is the fast settlement offer. The insurer may arrive with a check for medical bills plus a small “inconvenience” payment, accompanied by a release that ends your case forever. The offer arrives before you understand the cost of years of therapy, lost earning capacity, and the lifelong nature of the injury. The counter: we will not let a release be signed without a full valuation of the case. A fast check is cheap for the insurer because the survivor doesn’t yet know the case is worth many multiples of it. Once we value the case, the offer is almost always replaced with something closer to real.

The third play is the blame-shift. The defense will suggest the survivor was at fault — was drinking, was alone, was dressed in a certain way, had met the assailant before, had a prior relationship. None of these is a defense under Iowa law, and several of them are inadmissible. The counter: Iowa modified comparative fault with a 51% bar means the hotel’s own conduct is the dominant fault, and a survivor’s conduct in a hotel room is not an open invitation to be assaulted. We work with a forensic psychologist to document the harm, and we move the focus to the hotel’s conduct — the key, the clerk, the training, the lack of verification. Victim-blaming is a defense tactic, not a legal defense.

A fourth play, often the most damaging, is the surveillance of the survivor’s daily life. Insurers hire investigators to monitor social media, to drive by your house, to photograph you doing anything that looks like normal life. They will use the photograph of you at the grocery store to argue you are not as injured as you claim. The counter: the surveillance is itself evidence of the seriousness of your case, and a jury in Polk County, Iowa understands that someone who is not yet healed is still entitled to full justice. We prepare you for what to expect, and we know how to neutralize the surveillance when it is used against you.

A fifth play is the contractor shield. The hotel will argue the front-desk clerk was a contract worker, not a Hilton employee, not an Atrium employee, and not a John Q. Hammons employee. The counter: under Iowa agency law, the entity that controlled the worker’s conduct is the entity that answers for it. We follow the money, the supervision, and the training chain to identify which entity is the real employer for purposes of the case. The contractor defense rarely survives a properly framed discovery.

What We Do to Build the Case

We build the case around three things: the safety failure, the corporate structure, and the harm. Each of those three pillars has to be proven separately, and the case lives or dies on how well each is built.

The safety failure is the key-control record. We get the surveillance, the key-card logs, the front-desk records, the employee training files, the police report, and the AHLA standards. We hire a hotel-security expert to compare what the hotel did against what the industry trains. We depose the front-desk clerk, the manager on duty, the general manager, the training director, and the corporate officers. We find the policies that were supposed to be enforced and we show the jury the gap between the policy and what actually happened on the night the key was handed over.

The corporate structure is the work of mapping the shell game. We name Hilton Worldwide, John Q. Hammons, and Atrium Hospitality, and we identify the agent relationships, the franchise agreement terms, the control documents, and the insurance coverage. We determine which entity was the employer, which was the principal, which was the franchisor, and which was the property owner. We follow the money — the management fees, the franchise royalties, the rent — to find the entity with the balance sheet that can answer for the verdict.

The harm is built with the treating clinicians. We work with trauma therapists, psychiatrists, and forensic psychologists to document the injury in the language the law recognizes. We get the DSM-5 diagnosis, the treatment records, the prognosis, the long-term care plan. We work with a forensic economist to value the lost earning capacity and the lifetime cost of care. We build the case the way a jury will see it — as the human being whose life was rerouted by what the hotel did.

“Post-traumatic stress disorder isn’t a mood or a label a lawyer picks — it’s a formal medical diagnosis with eight separate requirements, and a survivor has to meet every one of them.”

The proof of harm is the proof of damages. We treat it with the same seriousness we treat the safety failure.

Why the Survivor Is the Right Plaintiff — Iowa’s Comparative-Fault Map

Iowa’s modified comparative-fault rule means your recovery is reduced by your percentage of fault and barred entirely if your fault is greater than the combined fault of the defendants. Iowa Code § 668.3. The defense will try to assign you a high percentage to reduce or eliminate the recovery. The law of the case requires us to be ready for that fight.

The honest truth is that in a key-control case, the dominant fault belongs to the hotel. The hotel’s employee handed a room key to a stranger. The hotel’s training program either did not exist, did not cover the situation, or was ignored. The hotel’s brand told the guest the room was safe. The hotel’s owner collected the rent. None of those faults can fairly be assigned to the survivor.

The defense will try to argue comparative fault based on choices the survivor made — why she was in Des Moines, whether she was alone, whether she had been drinking, what she was wearing. Under Iowa law, none of those factors is a defense to a hotel’s breach of its key-control duty. They are arguments to assign fault, and they are arguments we know how to answer, with a forensic psychologist, with the contemporaneous record, and with the simple truth that a hotel’s failure to protect its guest is not the guest’s fault.

The 51% bar in Iowa is a hard threshold, and we treat it that way. We do not promise we will defeat an effort to assign you more than half the fault — we promise we will fight every percentage point with the same energy we fight the safety failure itself. The verdict in a key-control case is won or lost at the fault-allocation stage as much as at the liability stage. We know that.

The Trauma Is Real, and the Law Recognizes It

Sexual assault produces psychological injury that is invisible to a stranger but documented in the medical literature. The most common diagnoses are post-traumatic stress disorder (PTSD), major depressive disorder, and complex trauma. The diagnostic criteria are set out in the DSM-5, and the diagnosis is made by a qualified clinician using validated instruments. The harm is not a feeling. It is a medical condition with a name, a set of criteria, and a treatment plan.

The defense will argue that the survivor is exaggerating, that the symptoms are not as severe as claimed, that the survivor is not as injured as the medical record suggests. We have heard that argument before, and we answer it. The forensic psychologist documents the symptoms, the trajectory, the prognosis, and the treatment cost. The medical record documents the care. The survivor’s own testimony, even with the gaps and fragmentation that trauma produces, is the human story the jury needs to hear.

“Most survivors freeze. It’s an automatic survival reflex — the body’s brakes slam on, the muscles lock, the voice won’t come — and in clinical study after clinical study, the majority of rape victims experienced exactly this involuntary paralysis.”

Tonic immobility, delayed disclosure, fragmented memory, the sense that the survivor was in some way responsible — these are the symptoms of the trauma, not the evidence of fabrication. We work with a forensic psychologist to explain the science to the jury, so the defense cannot weaponize the very symptoms that prove the harm.

The Hilton Brand — Why the Franchisor Is in the Case

Hilton Worldwide Holdings Inc. owns the Embassy Suites brand. The Hilton name is the brand promise on the reservation, the signage, the loyalty program, and the guest experience. When you booked the room, you were buying a Hilton experience — the key, the room, the safety, the standards.

The franchise model is designed to push liability down to the operator. Hilton will argue it does not run the Des Moines property, that it has no day-to-day involvement, that its franchising duties are limited. That argument is correct as far as it goes, but it does not end the case. Hilton sets the key-control standards the operator is required to follow. Hilton approves the operator. Hilton collects franchise fees. Hilton’s brand representation is what brought you to the property. Under Iowa agency law, apparent-agency doctrine, and the franchisor’s own duty of reasonable care, Hilton can be on the hook — not as the operator, but as the brand that profited from the trust it asked you to place in it.

We have seen this pattern in other contexts. The brand is rarely the easiest defendant to reach, but the brand is the defendant with the balance sheet. We name Hilton, we serve Hilton, and we force Hilton to defend on the same playing field as the operator and the owner.

How We Get Paid

We work on a contingency fee. We don’t get paid unless we win your case. The fee is 33.33% before trial and 40% if the case goes through trial. We advance the costs of investigation, expert witnesses, filing fees, and depositions. You owe us nothing out of pocket. The consultation is free, in English or Spanish, 24/7, and the first call is the beginning of a real conversation about your case, not a sales pitch.

If the case does not produce a recovery, you owe us nothing for the time we spent or the costs we advanced. We take the risk because we believe in the case, and we believe in the survivor. The fee is the only way the survivor can afford a case of this complexity — and the contingency fee is what gives the firm the incentive to do the work the case requires.

Frequently Asked Questions

I was assaulted in a Des Moines hotel and a stranger was given my key. How long do I have to sue in Iowa?

Iowa’s general personal-injury statute of limitations is two years from the date the cause of action accrues, under Iowa Code § 614.1(2). For sexual assault, Iowa applies a discovery rule in appropriate cases — the clock may not start until the injury and its cause are known or should have been known with reasonable diligence. The two-year number is a hard floor, but the date the clock starts is a question we work through with you based on the specific facts. The key point is: the proof in your case is on a clock that is far shorter than two years, and the call to a lawyer should be made now, not at the end of the deadline.

Who do I actually sue — the hotel on the sign or the parent company?

In an Embassy Suites sexual-assault case, three different companies can be on the hook: Hilton Worldwide Holdings Inc. (the franchisor and brand), John Q. Hammons Hotels & Resorts (the operator that hired the front-desk staff), and Atrium Hospitality (the property owner). Each of them has a piece of the duty. We name all three and force each to defend on the same playing field. The shell game of pointing at each other is exactly what the case is designed to defeat.

Can I sue a hotel in Iowa for a sexual assault by a stranger?

Yes. Iowa law treats the assault as the foreseeable consequence of the hotel’s failure to perform its duty of reasonable care. The hotel can be liable for negligent security, negligent hiring and training, negligent entrustment, and the direct corporate negligence that produced the danger. A third-party assailant does not insulate the hotel from accountability when the hotel’s own conduct created the opportunity.

What is the innkeeper’s duty in Iowa?

The innkeeper owes its guests a duty of reasonable care, which is older than any Iowa statute and grounded in the common law. For invitees — the highest tier of visitor — the duty includes taking reasonable steps to protect against foreseeable criminal acts of third parties. The duty is enforced through Iowa common law, the standards set by the AHLA, and the regulatory floor of Iowa Code Chapter 137C.

What evidence disappears first in a hotel sexual-assault case?

The surveillance video. Most hotels run a rolling overwrite on their CCTV, often 14 to 30 days. After that window closes, the camera footage that captured the stranger at the front desk, the clerk who handed over the key, and the corridor that night is gone. Key-card logs and PMS records are next — they are on internal schedules that can be 30 to 90 days. That is why the preservation letter has to go out the day you call. The preservation letter is the most important document in the case, and it is the one we send first.

How is “negligent security” proven in an Iowa hotel case?

The plaintiff proves negligent security by showing that the hotel’s conduct fell below the standard of reasonable care and that the harm was foreseeable. The standard is built from the common-law duty, the AHLA Key Control standards, Iowa Code Chapter 137C, and the industry training the hotel was supposed to provide. The foreseeability is built from prior incidents at the property, the red flags the staff should have seen, the key-control failure, and the absence of any reasonable response to the danger. We work with a hotel-security expert to compare the hotel’s conduct to the industry standard.

What if I did not report the assault right away?

Delayed disclosure is the norm for sexual assault, not the exception. Iowa’s discovery rule recognizes that the harm of sexual assault is often not fully realized until months or years after the event. The defense will try to use the delay to attack your credibility, and we are ready for that. The forensic psychologist we work with can explain the science of delayed disclosure to the jury — the trauma response, the tonic immobility, the dissociation, the gradual recognition of the harm. The delay does not defeat the case. It is part of the case.

Can I recover punitive damages in an Iowa hotel assault case?

Possibly. Iowa Code § 668A.1 allows punitive damages when the plaintiff proves by a preponderance of clear, convincing, and satisfactory evidence that the defendant’s conduct showed a willful and wanton disregard for the rights or safety of another. A key-control failure — handing a room key to a stranger without verifying ID — is exactly the kind of conduct that can support a punitive award. Punitive damages are not automatic, and we do not promise them. We do promise we will build the case for them.

What is the value of a hotel sexual-assault case in Iowa?

It depends. For a clear key-control failure producing serious psychological injury with documented treatment, the case value in a Polk County jury trial falls broadly between $1.5 million and $7.5 million as a working bracket. The number moves with the severity of the harm, the strength of the evidence, the venue, and the insurance limits. We do not promise a number — we promise we will value the case honestly and fight for what it is worth. The first conversation about value is part of the free consultation.

Will my case settle or go to trial?

Most hotel premises-liability cases settle before trial, but every case is prepared as if it will be tried. The decision to settle is yours, made with the firm’s advice. A settlement ends the case and provides certainty; a trial verdict can be larger but can also be reduced on appeal. We will walk you through the choice, the risks, and the timing, and the decision will be yours.

How long will my case take?

It depends on the defendants, the venue, the complexity of the corporate structure, and the court’s docket. A hotel premises-liability case in Polk County can resolve in twelve to thirty-six months, with settlement most common in the eighteen-to-twenty-four-month range. We move as fast as the evidence allows and as carefully as the case requires. The preservation letter goes out the day you call, and the discovery starts immediately.

I am not in Iowa. Can you still handle my case?

The incident happened in Iowa, and Iowa law applies. We are based in Texas, and we take cases in Iowa through local counsel and pro hac vice admission where required. The case will be filed in Polk County, in the Iowa District Court for Polk County, before a Polk County jury. The call is free, the consultation is free, and we will tell you honestly whether the case is one we can handle and where it should be filed.

Do I have to talk to the insurance adjuster?

No. You have the right to decline a recorded statement, to decline a recorded interview, and to refer the adjuster to your lawyer. A recorded statement taken without counsel can be used to attack the parts of your memory that trauma has fragmented. The first call from an adjuster is a signal to call us, not a reason to speak.

What if the hotel says the assailant was not their employee?

The status of the assailant — employee, contractor, guest, or stranger — does not insulate the hotel. Under Iowa law, the hotel’s duty runs to the guest, and the failure to perform the duty is the hotel’s own negligence, regardless of who the assailant was. A key-control failure is the hotel’s own breach.

What if the assailant was a guest at the same hotel?

The same principles apply. The hotel’s duty to its guests includes protection from foreseeable harm by other guests, and a key-control failure that hands a guest’s key to a stranger is the hotel’s own breach of that duty. The assailant’s status does not insulate the hotel from accountability for the safety failure.

Will I have to testify?

If the case goes to trial, you will likely have to testify. We prepare you for that testimony for many hours before you ever take the stand. We work with a forensic psychologist to help you tell the truth about what happened and what the harm has been. The testimony is yours. We do not script it. We prepare you so you can tell it in your own words, in your own time, with the support of the firm beside you.

How do I start?

The first move is the call. It is free, it is confidential, and it is the first step toward locking down the evidence. The number is 1-888-ATTY-911. We answer twenty-four hours a day, seven days a week. If you would rather have the first conversation in Spanish, ask for Lupe. The consultation is the beginning of the case, not the end of the search for help. Contact Attorney911.


The Single Sentence That Matters

You checked into a hotel because you trusted the lock, the key, the brand, and the building. The hotel’s own employee handed a copy of your key to a stranger without checking identification. The assault that followed was not an act of God and it was not bad luck. It was the foreseeable consequence of a safety failure the hotel industry trains against and Iowa law forbids.

You are not asking for sympathy. You are asking for accountability. You are asking that the companies that profited from the room where the assault happened be held to the standard they promised you, and that the harm you carry be valued honestly and compensated fully. We are the firm that does that work.

Past results depend on the facts of each case and do not guarantee future outcomes. The range we have discussed is a working bracket, not a promise. The case value depends on the specific facts, the venue, and the strength of the evidence. We do not guarantee outcomes. We do guarantee the work.

Free consultation. 24/7. English or Spanish. No fee unless we win. 1-888-ATTY-911. Hablamos Español.

Contact Attorney911 · Practice Areas · Ralph Manginello · Lupe Peña

Share this article:

Need Legal Help?

Free consultation. No fee unless we win your case.

Call 1-888-ATTY-911

Ready to Fight for Your Rights?

Free consultation. No upfront costs. We don't get paid unless we win your case.

Call 1-888-ATTY-911