HackingHospitalityHospitalityStolen CredentialsData ExfiltratedCustomer Data InvolvedFinancial accountPIILowContained

WYNDHAM HOTELS & RESORTS, INC.

bd_2efb23264c8e6cbe · schema v1 · pii pii-v1

Severity

Low

Discovered

May 1, 2009

Filed

Aug 21, 2009

To disclose

16 weeks

Affected

201state residents only

Linked

2 filings

Confidence

66%

Full breach record for WYNDHAM HOTELS & RESORTS, INC. →4 incidents on file

Wyndham Hotels and Resorts, LLC submitted a supplemental notice to the New Hampshire Attorney General regarding a data security incident affecting approximately 201 New Hampshire residents. The breach involved the unauthorized access of credit card numbers and transactional data from March 29 to May 10, 2009, via a sophisticated hacker. Wyndham retained forensic investigators, notified law enforcement and payment networks, and provided one year of credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 16 weeks / 112 days

Mar 29, 2009

Begins

May 1, 2009

Discovered

Aug 21, 2009

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_dbfa5df1ff86930a2009-08-24 · +3dVerified

Name: WYNDHAM HOTELS & RESORTS, INC.
norm: wyndham hotels resorts

Name: WYNDHAM HOTELS & RESORTS, INC.
norm: wyndham hotels resorts
Industry: Hospitalitynaics map

Discovered: May 1, 2009
Breach occurred: Mar 29, 2009 – May 10, 2009
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 21, 2009
Affected individuals: 201state-resident count only
Data types: Financial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Kelly A. Ayotte
Initial access: exploit_public_facing

During the incident: Retained a Qualified Investigative Response Assessor to conduct a thorough investigation
Notified law enforcement
Notified each of the major payment card networks (American Express, Visa, MasterCard, and Discover)
Provided payment card companies with the actual card numbers involved
Notified affected hotels to ensure their systems are properly investigated and secured
Changes made: Ensured the hack was terminated and disabled
Offered one year of credit card monitoring services (Equifax Credit Watch 3-in-1 Alerts)
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 21 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wyndham-hotel-20090821.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2009
Raw hash: 8e985302699bacf7e12d80337ee4970d2c3baa859cc6f6a4cede9a1ac691becb

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWYNDHAM HOTELS & RESORTS, INC.

Victim entityWYNDHAM HOTELS & RESORTS, INC.

Incidentdiscovered May 1, 2009

Stated responseRetained a Qualified Investigative Response Assessor to conduct a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov