HackingCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICLowContained
Ashford Inc.
bd_896471028c60fa93 · schema v1 · pii pii-v1
Full breach record for Ashford Inc. →Ashford, Inc. reported that an unauthorized actor accessed its computer network on September 7, 2023, acquiring files containing personal information of customers. The breach was discovered on September 20, 2023. Ashford notified federal law enforcement, engaged forensic specialists, and offered credit monitoring to affected individuals. Approximately 36 New Hampshire residents were notified.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_05df681a34121037California State AGfiled 2024-01-19Verified
- bd_3654e540ca3be24eVermont State AGfiled 2024-01-19Verified
- bd_5ee7e5c065ec7b49Maine State AGfiled 2024-01-19Candidate
- bd_ce299ece664da47eMontana State AGfiled 2024-01-19Verified
Show 1 more filing ↓Show fewer ↑
- bd_eda317d8129af43aIndiana State AGfiled 2024-01-19Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ashford-20240119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 19, 2024
- Raw hash
- a990f689c73bffe81862c29114fc2b049b99ca906b51e6b62ebadf1a7e547198
Reporting entity
- Name
- Ashford Inc.norm: ashford
- Domain
- ashfordinc.com
Victim entity
- Name
- Ashford Inc.norm: ashford
- Domain
- ashfordinc.com
Incident
- Discovered
- Sep 20, 2023
- Materiality determined
- Nov 8, 2023
- Notification sent
- Jan 19, 2024
- Affected individuals
- 36
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProvided written notice to relevant state regulators
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.