HackingHospitalityHospitalityStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained
Orient-Express Hotels Ltd.
bd_4da9d8d43a87c70e · schema v1 · pii pii-v1
Full breach record for Orient-Express Hotels Ltd. →Orient-Express Hotels Ltd. notified the NH AG that between July and Sept 24, 2013, an unauthorized party accessed 7 email accounts containing customer PII (names, payment card numbers, CVVs). 1 NH resident affected. No evidence of misuse.
J jump to incidentP pin to compareR raw source
Incident timeline
undetected · 85 days
discovery → filing · 12 weeks / 87 days
Jul 1, 2013
Begins
Sep 24, 2013
Discovered
Dec 20, 2013
Filed
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Massachusetts State AGbd_7183695665bb17352013-12-20Verified
Filing propagation · 2 filings · 2 states
View merged incident ↗Massachusetts State AGDec 20 · first
New Hampshire State AGDec 20 · first · this page
Evidence ladder
Leak-site claim
Attacker assertion only. Establishes: claim date, group, alleged victim.
Press / market report
Unlocks: incident narrative, operational impact. Still no compliance clock.
State AG / regulator filingThis record
Unlocks: discovery date, data types, affected count, compliance clock.
SEC 8-K / victim statement
Unlocks: materiality, stated response, full audit trail. Ceiling removed.