DisclosureLens
MalwareHospitalityHospitalityRansomwareData ExfiltratedTargetedPCIFinancial accountPIIMediumContained

HILTON WORLDWIDE HOLDINGS INC.

bd_25af5c6d17500973 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 24, 2015

Filed

Dec 3, 2015

To disclose

9 days

Affected

2,173state residents only

Linked

5 filings

Confidence

64%
Full breach record for HILTON WORLDWIDE HOLDINGS INC.

Hilton Worldwide disclosed unauthorized malware targeting payment card information (cardholder names, numbers, security codes, expiration dates) in point-of-sale systems at hotels. The malware operated between Nov 2014 and July 2015. Hilton engaged forensic experts and law enforcement, eradicated the malware, and offered one year of credit monitoring. No PINs or addresses were compromised. The specific number of affected individuals was not disclosed.

South Carolina clock SC CRA notice due9 days discovery → filing
notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 371 days
discovery → filing · 9 days

Nov 18, 2014

Begins

Nov 24, 2015

Discovered

Dec 3, 2015

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Washington State AGNov 24 · first
Massachusetts State AGNov 24 · first
Montana State AGNov 24 · first
California State AGNov 24 · first
South Carolina State AG+9d · this page

Pattern: first filing Nov 24 (WA), last Dec 3 (SC) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.