HackingHospitalityHospitalityStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedFinancial accountIdentity (basic)PIIMediumContained

Silver Cloud Inns & Hotels

bd_83c0ca2c61d7a9de · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2017

Filed

Aug 3, 2017

To disclose

8 weeks

Affected

1,382state residents only

Confidence

70%

Full breach record for Silver Cloud Inns & Hotels →

Silver Cloud Inns & Hotels notified WA AG of unauthorized access to Sabre Hospitality Solutions' SynXis system. Access occurred Aug 10, 2016 to Mar 9, 2017. Discovered June 6, 2017. 1,382 WA residents affected. Payment card info and PII exposed. Sabre engaged forensic firm and notified law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 300 days

discovery → filing · 8 weeks / 58 days

Aug 10, 2016

Begins

Jun 6, 2017

Discovered

Aug 3, 2017

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,382 affectedView incident

Name: Silver Cloud Inns & Hotels
norm: silver cloud inns hotels
Domain: silvercloud.com

Name: Silver Cloud Inns & Hotels
norm: silver cloud inns hotels
Domain: silvercloud.com
Industry: Hospitalityllm

Discovered: Jun 6, 2017
Breach occurred: Aug 10, 2016 – Mar 9, 2017
Undetected for: 300 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,382state-resident count only
Data types: Financial accountPII
Data elements: NameFinancial account number
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 300-399dexposure 200-299d
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General
Third party: via Sabre Hospitality Solutions
Initial access: valid_credentials

During the incident: Sabre engaged a leading cybersecurity firm to support its investigation
Sabre notified law enforcement and the payment card brands about this incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9731.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2017
Raw hash: 81aa0855d3a3d213ae328755795fb150e67fc533e84105ee4175598066528360

Reporting entitySilver Cloud Inns & Hotels

Victim entitySilver Cloud Inns & Hotels

Incidentdiscovered Jun 6, 2017

Stated responseSabre engaged a leading cybersecurity firm to support its investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com