MalwareRansomwareData ExfiltratedCustomer Data InvolvedPCIFINANCIAL_ACCOUNTLowContained
Starwood Hotels & Resorts Worldwide, LLC
bd_498f98b52e578931 · schema v1 · pii pii-v1
Full breach record for Starwood Hotels & Resorts Worldwide, LLC →Starwood Hotels & Resorts Worldwide, Inc. disclosed a malware intrusion affecting point-of-sale systems at a limited number of North American hotels between November 2014 and October 2015. The malware collected payment card data (cardholder name, number, security code, expiration date). Starwood engaged forensic experts and law enforcement, secured the systems, and offered one year of free credit monitoring and identity protection to affected customers.
California clockDiscovered Mar 2, 2015 → Notified Nov 20, 2015263d ✗ CA 60-day late38 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-58971
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2015
- Raw hash
- 4b26226a6e815ce5122d09894499b4e5106cf022c6f1376890022f433d6e0bc4
Reporting entity
- Name
- Starwood Hotels & Resorts Worldwide, LLCnorm: starwood hotels resorts
Victim entity
- Name
- Starwood Hotels & Resorts Worldwide, LLCnorm: starwood hotels resorts
Incident
- Discovered
- Mar 2, 2015
- Materiality determined
- Nov 20, 2015
- Notification sent
- Nov 20, 2015
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 38 weeks(263 days from discovery to filing)
- Compliance flags
- CA 60-day late · 263d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 2, 2015→ Notified: Nov 20, 2015263d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.