HackingHospitalityRetail & ConsumerHospitalityStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryFinancial accountPCIMediumContained

Blue Sky Casino LLC

bd_345f78f983f245a1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 13, 2015

Filed

Jan 31, 2015

To disclose

18 days

Affected · nationwide

87,97517 in this filing

Confidence

66%

Full breach record for Blue Sky Casino LLC →

Blue Sky Casino LLC (French Lick Resort) notified the NH AG of a credit card data breach. Malware was installed on POS systems between April 22, 2014, and detected January 13, 2015. 87,975 individuals notified; 17 NH residents. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 266 days

discovery → filing · 18 days

Apr 22, 2014

Begins

Jan 13, 2015

Discovered

Jan 31, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed87,975 affectedView incident

Name: Blue Sky Casino LLC
norm: blue sky casino

Name: Blue Sky Casino LLC
norm: blue sky casino
Industry: HospitalityllmRetail & Consumerllm

Discovered: Jan 13, 2015
Breach occurred: Apr 22, 2014 – Jan 21, 2015
Undetected for: 266 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 26, 2015
Affected individuals: 87,975state + nationwide
Data types: Financial accountPCI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Illinois Assistant Attorney General on January 28, 2015Formalized notification to New Hampshire Attorney General on January 31, 2015
Initial access: exploit_public_facing

During the incident: Took immediate steps to evaluate possible intrusion
Engaged incident response team
Engaged external legal and IT security/forensics experts
Neutralized malware on January 19, 2015
Retained PCI-certified forensics experts
Working with law enforcement authorities
Sent notification letters to all 87,975 guests, visitors and employees
Issued a press release to media
Established an internal call center
Offering credit monitoring through Experian
Changes made: Ensuring system is protected from security compromises on a go-forward basis
Applying additional safeguards to help prevent any compromises of security from happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/french-lick-resort-20150131.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 31, 2015
Raw hash: 26d4d6bb923e035c0dd1c1b6580df95f0363361f92f7b05516030f2720a24418

Reporting entityBlue Sky Casino LLC

Victim entityBlue Sky Casino LLC

Incidentdiscovered Jan 13, 2015

Stated responseTook immediate steps to evaluate possible intrusion

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov