DisclosureLens
HackingHospitalityFinancial accountFinancial credentialsMedium

Beaver Run Resort & Conference Center

bd_4be157dea328abbf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 29, 2024

Filed

May 16, 2024

To disclose

17 days

Affected · nationwide

1,2806 in this filing

Linked

4 filings

Confidence

50%
Full breach record for Beaver Run Resort & Conference Center

Beaver Run Resort & Conference Center experienced an external system breach, discovered on April 29, 2024, which originally occurred on February 19, 2024. The breach impacted 1,280 individuals, including 6 residents of Maine. The compromised data included names along with financial account or credit/debit card numbers combined with security codes, access codes, or PINs. In response, the company offered 24 months of Experian IdentityWorks credit monitoring and identity restoration services to those affected.

Maine clockDiscovered Apr 29, 2024Filed with AG May 16, 202417d ME AG ≤30d17 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 70 days
discovery → filing · 17 days

Feb 19, 2024

Begins

Apr 29, 2024

Discovered

May 16, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGMay 16 · first
Vermont State AGMay 16 · first
Maine State AGMay 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.