DisclosureLens
HackingTechnologyHospitalityInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Financial accountLowContained

SABRE CORPORATION

bd_20ae35967f1d404c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 6, 2017

Filed

Jul 12, 2017

To disclose

5 weeks

Affected

45state residents only

Linked

5 filings

Confidence

66%
Full breach record for SABRE CORPORATION →3 incidents on file

Sabre Corporation, a travel booking provider, experienced unauthorized access to its reservation systems between August 10, 2016, and March 9, 2017. Club Quarters Hotels, a client, notified the NH AG on July 12, 2017, regarding 45 NH residents. Data accessed included names, contact info, and payment card details. Sabre engaged Mandiant for forensics and notified law enforcement.

Incident timeline

undetected · 300 days
discovery → filing · 5 weeks / 36 days

Aug 10, 2016

Begins

Jun 6, 2017

Discovered

Jul 12, 2017

Filed

vs. sector median

13 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 2 states

View merged incident ↗
New Hampshire State AGJul 12 · first · this page
New Hampshire State AG+8d
California State AG+19d
New Hampshire State AG+19d
New Hampshire State AG+43d

Pattern: first filing Jul 12 (NH), last Aug 24 (NH) — a 43-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.