DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Financial accountIdentity (basic)LowContained

Aqua-Aston Hospitality

bd_8b4953f171c5df16 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 8, 2017

Filed

Jul 6, 2017

To disclose

28 days

Affected

10state residents only

Linked

5 filings

Confidence

66%
Full breach record for Aqua-Aston Hospitality2 incidents on file

Aqua-Aston Hospitality, LLC notified the New Hampshire Attorney General of a data breach involving its third-party vendor, Sabre Hospitality Solutions. Unauthorized access to the Sabre Central Reservations System occurred between August 10, 2016, and March 9, 2017. The attacker used valid account credentials to view payment card information (card number, expiration, CVV) and guest PII for approximately 10 New Hampshire residents. Sabre engaged forensic investigators and notified law enforcement. Aqua-Aston sent breach notifications to affected residents on July 7, 2017.

Incident timeline

undetected · 302 days
discovery → filing · 28 days

Aug 10, 2016

Begins

Jun 8, 2017

Discovered

Jul 6, 2017

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGJul 6 · first
New Hampshire State AGJul 6 · first · this page

Pattern: first filing Jul 6 (MT), last Jul 14 (CA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.