HEI Hotels & Resorts
bd_4c86346afddc039d · schema v1 · pii pii-v1
Full breach record for HEI Hotels & Resorts →HEI Hotels & Resorts notified the New Hampshire Attorney General of a security incident involving point-of-sale malware installed on payment processing systems at multiple Marriott, Hyatt, and Westin properties. The malware captured payment card data (account number, expiration, verification code) for transactions between December 2, 2015, and June 21, 2016. HEI engaged forensic experts, disabled the malware, and separated payment processing from its network. The exact number of affected individuals is unknown.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 2, 2015
Begins
Aug 12, 2016
Filed
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Montana State AGbd_0f26bbce75cef0d12016-08-12Candidate
- California State AGbd_de8180f36bdf09512016-08-12Verified
Filing propagation · 3 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.