HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

World Travel Holdings

bd_714a6ffeba2a8e6c · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 1, 2018

Filed

Apr 16, 2018

To disclose

7 weeks

Affected

12state residents only

Confidence

66%

Full breach record for World Travel Holdings →3 incidents on file

World Travel Holdings, Inc. (WTH) notified the NH Attorney General of a potential data security incident involving its third-party provider, Orbitz Worldwide, LLC. Unauthorized access to a legacy Orbitz platform occurred between Oct 1, 2017 and Dec 22, 2017. Orbitz detected evidence of access on March 1, 2018. Data potentially accessed included names, payment card info, DOB, phone, email, and address. 12 NH residents were affected. WTH and Orbitz are offering 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 151 days

discovery → filing · 7 weeks / 46 days

Oct 1, 2017

Begins

Mar 1, 2018

Discovered

Apr 16, 2018

Filed

vs. sector median

1 wks faster

Part of Orbitz Worldwide, LLC supply-chain incident (2018) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident

Name: World Travel Holdings
norm: world travel
Domain: worldtravelholdings.com

Name: World Travel Holdings
norm: world travel
Domain: worldtravelholdings.com
Industry: Retail & Consumerllm

Discovered: Mar 1, 2018
Breach occurred: Oct 1, 2017 – Dec 22, 2017
Undetected for: 151 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 16, 2018
Affected individuals: 12state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Third party: via Orbitz Worldwide, LLC
Initial access: supply_chain

During the incident: Orbitz took immediate steps to investigate the incident and enhance security and monitoring of the affected platform
Orbitz brought in a leading third party forensic investigation firm and other cybersecurity experts
Orbitz began working with law enforcement
Orbitz took measures to effectively prevent any unauthorized access and enhance security
Orbitz started working immediately to notify potentially impacted customers and business partners
Orbitz is offering one year of complimentary credit monitoring and identity protection service
Changes made: Orbitz took swift action to eliminate and prevent unauthorized access to the platform
Orbitz enhanced security and monitoring of the affected platform
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/world-travel-20180416.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2018
Raw hash: 1d2fc0fecaa215471b91aca0b250374b8242d21a87cc68b953e76116b8ac5b2f

Reporting entityWorld Travel Holdings

Victim entityWorld Travel Holdings

Incidentdiscovered Mar 1, 2018

Stated responseOrbitz took immediate steps to investigate the incident and enhance security and monitoring of the affected platform

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov