MalwareHospitalityHospitalityRansomwareData ExfiltratedTargetedIdentity (basic)Financial accountLowContained

Key Ambassador Resort Inn

bd_78f9f994bd927ff4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 13, 2018

Filed

Jun 14, 2019

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for Key Ambassador Resort Inn →

Key West Hotels, LLC (owner of Key Ambassador Resort Inn) disclosed that an unauthorized intruder used malware to access the hotel's front desk computer system between Feb 7, 2018 and Dec 13, 2018. Guest names, addresses, phone numbers, and partial credit card data were potentially viewed. The hotel retained a cybersecurity firm, removed malware, and notified federal law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 309 days

discovery → filing · 26 weeks / 183 days

Feb 7, 2018

Begins

Dec 13, 2018

Discovered

Jun 14, 2019

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_2d7959d48d72da992019-04-02 · +73dCandidate

Name: Key West Hotels, LLC
norm: key west hotels

Name: Key Ambassador Resort Inn
norm: key ambassador resort inn
Industry: Hospitalityllm

Discovered: Dec 13, 2018
Breach occurred: Feb 7, 2018 – Dec 13, 2018
Undetected for: 309 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcement officials
Initial access: valid_credentials

During the incident: Retained a well-known global cyber security firm to perform an assessment of the computer system
Removed malware
Restored the system so that it could be used safely
Conducted an investigation by a forensic technology expert
Implemented improvements and technical safeguards to system security
Notified federal law enforcement officials of the incident
Changes made: Implemented improvements and technical safeguards to system security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 2 · first

Delaware State AG+73d · this page

Pattern: first filing Apr 2 (NH), last Jun 14 (DE) — a 73-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2019/06/Key-West-Hotels-Consumer-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2019
Raw hash: 8de70d7ddd67425616953322533b5a474b1dc86c4878b5ceae0f3671dd953cb4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKey West Hotels, LLC

Victim entityKey Ambassador Resort Inn

Incidentdiscovered Dec 13, 2018

Stated responseRetained a well-known global cyber security firm to perform an assessment of the computer system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov