MalwareHospitalityHospitalityRansomwareData ExfiltratedTargetedFinancial accountIdentity (basic)LowActive

Island Hotel Company Limited

bd_641b47d7c15742dc · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 21, 2016

Filed

Nov 21, 2016

To disclose

4 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for Island Hotel Company Limited →3 incidents on file

Island Hotel Company Limited (operating Atlantis, Paradise Island) notified NH AG of a data event affecting payment card data. Malware captured card numbers, expiration dates, CVVs, and names from F&B/retail locations between March 9 and Oct 22, 2016. Discovered Oct 21, 2016. Count unknown due to lack of contact info. Substitutive notice via press release.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 226 days

discovery → filing · 4 weeks / 31 days

Mar 9, 2016

Begins

Oct 21, 2016

Discovered

Nov 21, 2016

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Washington State AGbd_fd6fd262a213450c2016-11-21Verified
Oregon State AGbd_53e016eae94adc862016-11-23 · +2dVerified
California State AGbd_a51f13dd392b3a622016-11-23 · +2dVerified

Name: Island Hotel Company Limited
norm: island hotel

Name: Island Hotel Company Limited
norm: island hotel
Industry: Hospitalityllm

Discovered: Oct 21, 2016
Breach occurred: Mar 9, 2016 – Oct 22, 2016
Undetected for: 226 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 21, 2016
Affected individuals: Not disclosed
Data types: Financial accountIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralProviding written notice to other state regulators

During the incident: Working with third-party forensic experts to investigate reports and identify signs of compromise
Removed the malware at issue to contain this incident
Implemented additional procedures in an effort to prevent any further unauthorized access to customers' credit and debit card information
Established a dedicated hotline for customers to contact with questions or concerns
Providing potentially impacted customers with helpful information on how to protect against identity theft and fraud
Providing written notice of this incident to other state regulators and the national consumer reporting agencies
Changes made: Implemented additional procedures in an effort to prevent any further unauthorized access to customers' credit and debit card information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Washington State AGNov 21 · first

New Hampshire State AGNov 21 · first · this page

Oregon State AG+2d

California State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/island-hotel-20161121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2016
Raw hash: 33ae201a7998e4c493f8c482b7043f4f7515fea8394f2f7819b7b39eda8f58b4

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityIsland Hotel Company Limited

Victim entityIsland Hotel Company Limited

Incidentdiscovered Oct 21, 2016

Stated responseWorking with third-party forensic experts to investigate reports and identify signs of compromise

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov