MalwareHospitalityHospitalityInfostealerCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)LowContained

Starwood Hotels & Resorts Worldwide, LLC

bd_498f98b52e578931 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 20, 2015

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Starwood Hotels & Resorts Worldwide, LLC →4 incidents on file

Starwood Hotels & Resorts Worldwide, Inc. disclosed a malware intrusion affecting point-of-sale systems at a limited number of hotels in North America. The malware, designed to collect payment card information (cardholder name, number, security code, expiration date), was active between November 2014 and October 2015. Starwood engaged forensic experts, notified law enforcement, and offered one year of credit monitoring to affected customers. The malware has been contained and no longer presents a threat.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 5, 2014

Begins

Nov 20, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Starwood Hotels & Resorts Worldwide, LLC
norm: starwood hotels resorts

Name: Starwood Hotels & Resorts Worldwide, LLC
norm: starwood hotels resorts
Industry: Hospitalityllm

Discovered: —
Breach occurred: Nov 5, 2014 – Oct 23, 2015
Materiality determined: —
Notification sent: Nov 20, 2015
Affected individuals: Not disclosed
Data types: Financial accountFinancial credentialsIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1553.001 Impair DefensesT1056.001 Keylogging
Threat actor: ExternalFinancial
Regulator citations: Working closely with law enforcement authoritiesCoordinating efforts with the payment card organizations

During the incident: Engaged third-party forensic experts to conduct an extensive investigation
Working closely with law enforcement authorities
Coordinating efforts with the payment card organizations
Implemented additional security measures to help prevent this type of crime from reoccurring
Arranged with AllClear ID to offer identity protection and credit monitoring services to affected Starwood customers for one year at no cost
Changes made: Implemented additional security measures to help prevent this type of crime from reoccurring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-58971
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2015
Raw hash: 4b26226a6e815ce5122d09894499b4e5106cf022c6f1376890022f433d6e0bc4

Reporting entityStarwood Hotels & Resorts Worldwide, LLC

Victim entityStarwood Hotels & Resorts Worldwide, LLC

IncidentUnknown

Stated responseEngaged third-party forensic experts to conduct an extensive investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov