DisclosureLens
MalwareHospitalityHospitalityCapture Stored DataData ExfiltratedCustomer Data InvolvedPCIFinancial accountFinancial credentialsIdentity (basic)LowResolved

Omni Hotels & Resorts

bd_870a61eb6495f324 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 30, 2016

Filed

Jul 8, 2016

To disclose

6 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

62%
Full breach record for Omni Hotels & Resorts2 incidents on file

Omni Hotels & Resorts disclosed a malware intrusion affecting point-of-sale systems at certain properties. The malware collected payment card information, including cardholder name, card number, security code, and expiration date. The incident occurred between December 23, 2015, and June 14, 2016, and was discovered on May 30, 2016. The intrusion has been contained, and Omni engaged forensic investigators and law enforcement. Affected guests were offered 12 months of identity theft protection.

California clockDiscovered May 30, 2016Notified Jul 8, 201639d CA 60-day OK6 weeks discovery → filing

Incident timeline

undetected · 159 days
discovery → filing · 6 weeks / 39 days

Dec 23, 2015

Begins

May 30, 2016

Discovered

Jul 8, 2016

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 13d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗

Pattern: first filing Jul 7 (NH), last Jul 21 (OR) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.