MalwareHospitalityHospitalityCustomer Data InvolvedPCIFinancial accountFinancial credentialsIdentity (basic)LowContained

Trump Hotel Collection

bd_8f01e005093f7f49 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 25, 2015

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Trump Hotel Collection notified customers of a security incident at Trump International Hotel & Tower Las Vegas. Unauthorized malware accessed payment card information (account numbers, expiration dates, security codes, names) between May 19, 2014, and June 2, 2015. Forensic investigation did not conclusively determine if data was taken, but malware was removed. FBI and financial institutions were notified. One year of identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

May 19, 2014

Begins

Sep 25, 2015

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_9bfd6dd4e9902c3f2015-09-25Verified
Massachusetts State AGbd_56503c9adb7456a92015-09-28 · +3dVerified

Name: Trump Hotel Collection
norm: trump hotel collection

Name: Trump Hotel Collection
norm: trump hotel collection
Industry: Hospitalityllm

Discovered: —
Breach occurred: May 19, 2014 – Jun 2, 2015
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PCIFinancial accountFinancial credentialsIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the F.B.I.

During the incident: Notified the F.B.I. and financial institutions
Engaged an outside forensic expert to conduct an investigation
Removed the malware
Reconfiguring various components of our network and payment systems
Changes made: Offering one year of complimentary fraud resolution and identity protection services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGSep 25 · first

California State AGSep 25 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-57993
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2015
Raw hash: 4606ffa90b2183339ae707a229a7abb873186f9a04c318b47495e7b372ae2a05

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTrump Hotel Collection

Victim entityTrump Hotel Collection

IncidentUnknown

Stated responseNotified the F.B.I. and financial institutions

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov