HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)FINANCIAL_ACCOUNTIDENTITY_BASICLowContained
Aimbridge Hospitality Holdings, LLC
bd_4d03e18b6b266ce3 · schema v1 · pii pii-v1
Full breach record for Aimbridge Hospitality Holdings, LLC →Aimbridge Hospitality Holdings LLC reported a data breach involving its third-party vendor, Sabre Hospitality Solutions. Between August 10, 2016, and March 9, 2017, an unauthorized party accessed unencrypted payment card information (card number, expiration, security code) and guest PII (name, email, phone, address) from the SynXis Central Reservations System. Sabre notified Aimbridge on June 6, 2017. Aimbridge engaged forensic investigators and notified law enforcement and payment card brands. No SSN or government IDs were impacted.
California clockDiscovered Jun 6, 2017 → Notified Aug 22, 201777d ✗ CA 60-day late11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-101324
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 24, 2017
- Raw hash
- 16b63c196e1a27bbece6a7fa5dbedad83a7e4cd1a5a254e71c5c2f49f06da467
Reporting entity
- Name
- Aimbridge Hospitality Holdings, LLCnorm: aimbridge hospitality
Victim entity
- Name
- Aimbridge Hospitality Holdings, LLCnorm: aimbridge hospitality
Incident
- Discovered
- Jun 6, 2017
- Materiality determined
- —
- Notification sent
- Aug 22, 2017
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- CA 60-day late · 77d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 6, 2017→ Notified: Aug 22, 201777d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.