HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Westwood Country Club
bd_81c9fde4306f0990 · schema v1 · pii pii-v1
Full breach record for Westwood Country Club →Westwood Country Club, located in St. Louis, MO, notified the Maryland Attorney General of a cybersecurity event discovered on October 17, 2024. An unauthorized actor accessed and copied files containing names, Social Security numbers, driver's license numbers, financial account information, and medical data. Six Maryland residents were affected. Notifications were mailed on March 24, 2025, offering 24 months of credit monitoring.
Leak gap clock✗ Leak >180d18 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident
A leak claim by meow about this victim predates this filing by 543 days.View originating leak claim
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376727.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2026
- Raw hash
- 15112de147072dde50c8d8932e4c35a9590e1a7898821a4ddfad8219325e29c9
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- Westwood Country Clubnorm: westwood country club
- Domain
- westwoodcc.com
Incident
- Discovered
- Oct 17, 2024
- Materiality determined
- —
- Notification sent
- Mar 24, 2025
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified the Maryland Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 months(553 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.