HackingHospitalityHospitalityStolen CredentialsEmployee Data InvolvedGovernment IDIdentity (basic)MediumContained

Jet Living Hotels, LLC

bd_0d79cd8f16a9878c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 28, 2023

Filed

Feb 2, 2024

To disclose

40 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Jet Living Hotels, LLC →

Jet Living Hotels, LLC reported that an unauthorized actor gained access to one employee's email account on April 28, 2023. The incident potentially affected personal information, including Social Security numbers, of one New Hampshire resident. The company contained the incident, engaged forensic experts, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 40 weeks / 280 days

Apr 28, 2023

Begins

Apr 28, 2023

Discovered

Feb 2, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Jet Living Hotels, LLC
norm: jet living hotels

Name: Jet Living Hotels, LLC
norm: jet living hotels
Industry: Hospitalityllm

Discovered: Apr 28, 2023
Breach occurred: Apr 28, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 19, 2023
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Activated our incident response protocols
Took steps to secure our environment with the assistance of outside cybersecurity experts
Conducted a forensic investigation to determine the nature of the activity
Immediately changed the password to your account
Changes made: Implemented measures to further enhance the security of our email environment
Offering complimentary identity protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 40 weeks(280 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/jet-living-hotels-20240202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 2, 2024
Raw hash: fef843d9570a60a061ca1794663102b7bcee93a09f23046235ec74b2b3542911

Reporting entityJet Living Hotels, LLC

Victim entityJet Living Hotels, LLC

Incidentdiscovered Apr 28, 2023

Stated responseActivated our incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov