DisclosureLens
MalwareHospitalityHospitalityCustomer Data InvolvedDelayed DiscoveryPCIFinancial accountIdentity (basic)LowContained

Anasazi Hotel LLC

bd_62b4f003716e4cc8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 21, 2013

Filed

May 30, 2013

To disclose

10 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%
Full breach record for Anasazi Hotel LLC

Anasazi Hotel LLC notified customers that malware installed on its systems between June 18, 2012, and March 21, 2013, may have accessed credit card data. The incident was discovered on March 21, 2013, when the hotel was identified as a common point of purchase for fraudulent transactions. Forensic investigation confirmed malware designed to transmit credit card data, though no evidence of actual exfiltration was found. The hotel locked down systems, engaged forensics, notified the Secret Service, and offered free identity protection.

Incident timeline

undetected · 276 days
discovery → filing · 10 weeks / 70 days

Jun 18, 2012

Begins

Mar 21, 2013

Discovered

May 30, 2013

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
New Hampshire State AGMay 30 · first
California State AGMay 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.