HackingRetail & ConsumerRetailStolen CredentialsDelayed DiscoveryCustomer Data InvolvedTargetedIdentity (basic)Financial accountPIILowContained

WorldPass Travel Group, LLC

bd_46a626bbf160dde9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 5, 2012

Filed

Mar 27, 2012

To disclose

22 days

Affected

1state residents only

Confidence

66%

Full breach record for WorldPass Travel Group, LLC →

WorldPass Travel Group, LLC reported a security incident to the NH AG on March 27, 2012. Unauthorized access occurred as early as July 2010, discovered March 5, 2012. ~1 NH resident affected. Data included PII and credit card info. Response included system shutdown, law enforcement notification (FBI/Secret Service), and 2 years credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 613 days

discovery → filing · 22 days

Jul 1, 2010

Begins

Mar 5, 2012

Discovered

Mar 27, 2012

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: WorldPass Travel Group, LLC
norm: worldpass travel

Name: WorldPass Travel Group, LLC
norm: worldpass travel
Industry: Retail & Consumerllm

Discovered: Mar 5, 2012
Breach occurred: Jul 1, 2010
Undetected for: 613 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 8, 2012
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Reported this cyber-attack to the local police, the FBI, and the U.S. Secret Service
Initial access: valid_credentials

During the incident: Shut down our entire data system to fully investigate the matter and eliminate any further unlawful access to our system
Reported this cyber-attack to the local police, the FBI, and the U.S. Secret Service
Contacted the affected customers on March 8, 2012 by email if we could, and for those we could not contact by email, by phone or regular mail
Offering credit monitoring services at no charge
Changes made: Systems have been restored and are fully functional and operating with increased system security
Enhanced password protection
Limited external system access
Re-encrypted data with a new private key
Offering two years of free credit monitoring and identity protection services with AllClear ID
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/worldpass-20120327.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2012
Raw hash: a58aa7e3b08868c48871782ddb0e668144618a4f1c94bacfa312b4dc836d1f3f

Reporting entityWorldPass Travel Group, LLC

Victim entityWorldPass Travel Group, LLC

Incidentdiscovered Mar 5, 2012

Stated responseShut down our entire data system to fully investigate the matter and eliminate any further unlawful access to our system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov