MalwareHospitalityHospitalityRansomwareData EncryptedTargetedPCIFinancial accountIdentity (basic)LowContained

HILTON WORLDWIDE HOLDINGS INC.

bd_78dc814dedd56752 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 24, 2015

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for HILTON WORLDWIDE HOLDINGS INC. →

Hilton Worldwide disclosed unauthorized malware targeting payment card information in point-of-sale systems at hotels. The malware operated between Nov 2014 and July 2015. Affected data included cardholder names, card numbers, security codes, and expiration dates. Hilton engaged forensic experts and law enforcement, offered credit monitoring, and strengthened systems. No specific affected individual count was provided.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 18, 2014

Begins

Nov 24, 2015

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Washington State AGbd_5121296658c0299e2015-11-24Candidate
Massachusetts State AGbd_5b9bdc8464cf74622015-11-24Verified
California State AGbd_a7c1b60b6a8d4dfd2015-11-24Verified
South Carolina State AGbd_25af5c6d175009732015-12-03 · +9dVerified

Name: HILTON WORLDWIDE HOLDINGS INC.
norm: hilton worldwide
Domain: hiltonworldwide.com

Name: HILTON WORLDWIDE HOLDINGS INC.
norm: hilton worldwide
Domain: hiltonworldwide.com
Industry: Hospitalityllm

Discovered: —
Breach occurred: Nov 18, 2014 – Jul 27, 2015
Materiality determined: —
Notification sent: Nov 24, 2015
Affected individuals: Not disclosed
Data types: PCIFinancial accountIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Launched an investigation
Strengthened its systems
Worked with third-party forensics experts
Worked with law enforcement
Worked with payment card companies
Offering one-year credit monitoring
Changes made: Strengthened its systems
Eradicated unauthorized malware
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Washington State AGNov 24 · first

Massachusetts State AGNov 24 · first

California State AGNov 24 · first

Montana State AGNov 24 · first · this page

South Carolina State AG+9d

Pattern: first filing Nov 24 (WA), last Dec 3 (SC) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Hilton.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 24, 2015
Raw hash: 87d70ca1ed367a4e9e18b6e8f0743db4d2ca5dc63d53b1417df0b260c4ca50a4

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityHILTON WORLDWIDE HOLDINGS INC.

Victim entityHILTON WORLDWIDE HOLDINGS INC.

IncidentRansomware

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov