HackingRetail & ConsumerRetailStolen CredentialsMulti-Stage ChainCustomer Data InvolvedIdentity (basic)MediumContained

United Time Group LLC

bd_1abcd30773e29f68 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 4, 2024

Filed

Jan 16, 2025

To disclose

10 weeks

Affected

1,494state residents only

Confidence

69%

Full breach record for United Time Group LLC →

United Time Group LLC (d/b/a Ashford.com) disclosed a cyberattack involving unauthorized access via credential misuse between Sept 3 and Nov 3, 2024. Discovered Nov 4, 2024, the incident exposed names, addresses, and DOBs of 1,494 Washington residents. The company engaged forensic investigators, reset credentials, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d10 weeks discovery → filing

Incident timeline

undetected · 62 days

discovery → filing · 10 weeks / 73 days

Sep 3, 2024

Begins

Nov 4, 2024

Discovered

Jan 16, 2025

Filed

vs. sector median

+3 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,494 affectedView incident

Name: United Time Group LLC
norm: united time
Domain: ashford.com

Name: United Time Group LLC
norm: united time
Domain: ashford.com
Also named: United Time Group LLCdba oflegal entity
Ashford.comdba oftrade name
Industry: Retail & Consumerllm

Discovered: Nov 4, 2024
Breach occurred: Sep 3, 2024 – Nov 3, 2024
Undetected for: 62 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 16, 2025
Affected individuals: 1,494state-resident count only
Data types: Identity (basic)
Data elements: NameDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Commenced an investigation working with our internal response team and our third-party IT service providers to secure our information systems and contain the effects of the incident
Retained a third party cyber security firm to thoroughly investigate the matter and verify our internal findings
Changes made: Changed system passwords and updated security keys
Strengthened system authentication methods
Improved system monitoring capabilities
Reviewed and strengthened our system integrations where appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA31945.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2025
Raw hash: 3095e9060cc86c280cdbed787bd6ddcc243ac40be4e137ebac209b07d75cd04f

Reporting entityUnited Time Group LLC

Victim entityUnited Time Group LLC

Incidentdiscovered Nov 4, 2024

Stated responseCommenced an investigation working with our internal response team and our third-party IT service providers to secure our information systems and contain the effects of the incident

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com