MalwareHospitalityHospitalityInfostealerData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Crowne Plaza Columbus, Ohio

bd_3f0eb77d1bd17ba2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 4, 2012

Filed

May 18, 2012

To disclose

6 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Crowne Plaza Columbus, Ohio →

Crowne Plaza Columbus, Ohio (owned by VWI Operations, LLC, managed by Interstate Management Company, LLC) experienced a malware incident on front desk computers between March 14-23, 2012. Discovered April 4, 2012, the malware likely captured guest names, addresses, and credit card data. The hotel notified law enforcement (Secret Service) and card networks, deactivated infected systems, and implemented employee training.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 21 days

discovery → filing · 6 weeks / 44 days

Mar 14, 2012

Begins

Apr 4, 2012

Discovered

May 18, 2012

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Interstate Management Company, LLC
norm: interstate management

Name: Crowne Plaza Columbus, Ohio
norm: crowne plaza columbus ohio
Industry: Hospitalityllm

Discovered: Apr 4, 2012
Breach occurred: Mar 14, 2012 – Mar 23, 2012
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1056 Input CaptureT1071 Application Layer Protocol
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of JusticeNotified Secret ServiceNotified major payment card companies

During the incident: Reported this data security incident to the appropriate law enforcement authorities, including the Secret Service
Notified each of the major payment card companies (American Express, Visa, Mastercard, and Discover)
Immediately deactivated the front desk computers infected with malware and installed new computers
Blocked malware communications generated from the affected computers at the Hotel to prevent further transmission of the malware or any further transmission of personal data
Changes made: Reviewed and modified its practices in storing and safeguarding Hotel guest’s credit card information
Provided training to Hotel employees to recognize and be aware of malware risks in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/crowne-plaza-columbus-20120518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 18, 2012
Raw hash: 3adea2666cda2027576c50bae0f60c90e7f258af658e930e9ddb66ab65e0a2b7

Reporting entityInterstate Management Company, LLC

Victim entityCrowne Plaza Columbus, Ohio

Incidentdiscovered Apr 4, 2012

Stated responseReported this data security incident to the appropriate law enforcement authorities, including the Secret Service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov