HackingHospitalityHospitalityStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Fontainebleau Florida Hotel, LLC

bd_4d3ea3dc8a840970 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 11, 2023

To disclose

—

Affected

11state residents only

Linked

3 filings

Confidence

67%

Full breach record for Fontainebleau Florida Hotel, LLC →2 incidents on file

Fontainebleau Florida Hotel, LLC issued a consumer notification regarding a cybersecurity incident involving unauthorized access to customer data. The breach likely involved the misuse of stolen credentials. Affected data includes names and government IDs. The company provided 12 months of Experian IdentityWorks membership and identity theft insurance to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 11, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_281241bfba9e3c042023-05-11Verified
Vermont State AGbd_ceb0e030a67ab4802023-05-11Verified

Name: Fontainebleau Florida Hotel, LLC
norm: fontainebleau florida hotel

Name: Fontainebleau Florida Hotel, LLC
norm: fontainebleau florida hotel
Industry: Hospitalityllm

Discovered: —
Materiality determined: —
Notification sent: Jul 26, 2023
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Offering 12-month Experian IdentityWorks membership
Providing $1 Million Identity Theft Insurance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGMay 11 · first

Vermont State AGMay 11 · first

Montana State AGMay 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-294.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 11, 2023
Raw hash: bda26c948012cc1381cb829c7a4a630e67712ba2318aafa1dd75ebfd77081de9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFontainebleau Florida Hotel, LLC

Victim entityFontainebleau Florida Hotel, LLC

IncidentUnauthorized Access

Stated responseOffering 12-month Experian IdentityWorks membership

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov