MalwareInfostealerData ExfiltratedCustomer Data InvolvedPCIFINANCIAL_ACCOUNTLowResolved
Kimpton Hotels & Restaurants
bd_73b609dc13afff55 · schema v1 · pii pii-v1
Full breach record for Kimpton Hotels & Restaurants →Kimpton Hotels & Restaurants Group, LLC reported a data breach involving malware installed on payment card processing servers at select hotel restaurants and front desks. The malware captured payment card track data (card numbers, expiration dates, verification codes) from February 16, 2016, to July 7, 2016. The incident was discovered on July 15, 2016, and resolved. Kimpton notified law enforcement and payment card networks. No specific number of affected individuals was disclosed in the filing.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_85c12a18a41a5de2Washington State AGfiled 2016-08-31Candidate
- bd_ae1e65eb342337b9Oregon State AGfiled 2016-08-31Verified
- bd_e6797297cc21c25bMontana State AGfiled 2016-08-31Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-63669
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 31, 2016
- Raw hash
- 7733db87ed1cc5da6235b8905b025b16871967fc1f823e8dcc6f3eebc5ab7a0a
Reporting entity
- Name
- Kimpton Hotels & Restaurantsnorm: kimpton hotels restaurants
Victim entity
- Name
- Kimpton Hotels & Restaurantsnorm: kimpton hotels restaurants
Incident
- Discovered
- Jul 15, 2016
- Materiality determined
- Sep 26, 2016
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.