HackingTechnologyInformationVulnerability ExploitCapture Stored DataTargetedData ExfiltratedPIIIdentity (basic)Financial accountAuthenticationMediumActive

Resort Data Processing

bd_78e25fe4ecbfdb01 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 14, 2021

Filed

Jul 14, 2021

To disclose

4 weeks

Affected

1,669state residents only

Linked

10 filings

Confidence

70%

Full breach record for Resort Data Processing →4 incidents on file

Resort Data Processing, Inc. (RDP) notified Washington AG that its online booking engine was compromised between Feb 22 and Jun 14, 2021. Attackers used malicious code to capture credit/debit card info before tokenization. 1,669 WA residents affected. RDP deployed a patch and engaged forensic investigators.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d4 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 112 days

discovery → filing · 4 weeks / 30 days

Feb 22, 2021

Begins

Jun 14, 2021

Discovered

Jul 14, 2021

Filed

vs. sector median

14 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Maine State AGbd_32db99b757ca2d672021-07-14Candidate
Indiana State AGbd_602f99f557079f092021-07-14Verified
Oregon State AGbd_7ff3dec2010370682021-07-22 · +8dVerified
New Hampshire State AGbd_8d365a8625c524b12021-07-22 · +8dVerified

Show 5 more filings ↓up to 13d gap

California State AGbd_9dcdd5d44158e3b02021-07-22 · +8dVerified
Montana State AGbd_26e0d8d5acfcd4f82021-07-23 · +9dVerified
Massachusetts State AGbd_9f4b7050f82829782021-07-23 · +9dVerified
Montana State AGbd_ccfadf2ce48081122021-07-23 · +9dVerified
Montana State AGbd_8b312adb02cdb1752021-07-27 · +13dVerified

Name: Zeroday Law
norm: zeroday law
Domain: resortdata.com

Name: Resort Data Processing
norm: resort data processing
Domain: resortdata.com
Industry: Technologyllm

Discovered: Jun 14, 2021
Breach occurred: Feb 22, 2021 – Jun 14, 2021
Undetected for: 112 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 14, 2021
Affected individuals: 1,669state-resident count only
Data types: PIIIdentity (basic)Financial accountAuthentication
Data elements: NameFinancial account numberUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 100-199dexposure 100-199d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Took immediate steps to terminate the attackers’ access
Developed and deployed a security patch
Hired a leading cybersecurity forensics firm to fully investigate the incident
Changes made: Fixed the software vulnerability
Consulting with cybersecurity experts to identify and implement additional controls to further enhance our online booking system’s security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 8 states

View merged incident ↗

Maine State AGJul 14 · first

Indiana State AGJul 14 · first

Washington State AGJul 14 · first · this page

Oregon State AG+8d

New Hampshire State AG+8d

California State AG+8d

Montana State AG+9d

Massachusetts State AG+9d

Montana State AG+9d

Montana State AG+13d

Pattern: first filing Jul 14 (ME), last Jul 27 (MT) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10696.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 14, 2021
Raw hash: 524eb5a576d4e49cf86bd0293e92099d7f6cca40621166474dd72786f87bfe1e

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityZeroday Law

Victim entityResort Data Processing

Incidentdiscovered Jun 14, 2021

Stated responseTook immediate steps to terminate the attackers’ access

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com