MalwareHospitalityHospitalityRansomwareData EncryptedCustomer Data InvolvedFinancial accountIdentity (basic)LowContained

Trump Hotel Collection

bd_9bfd6dd4e9902c3f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 25, 2015

To disclose

—

Affected

3state residents only

Linked

3 filings

Confidence

66%

Trump Hotel Collection notified NH AG of a security incident affecting payment card data (account number, expiration, security code, name) of ~3 NH residents. Incident occurred May 2014–June 2015 at Las Vegas and Honolulu hotels. Malware accessed payment systems. Forensic investigation found no evidence data was taken. Remediation included malware removal, credential changes, and network reconfiguration. Law enforcement (FBI/Secret Service) notified.

J jump to incidentP pin to compareR raw source

Incident timeline

May 19, 2014

Begins

Sep 25, 2015

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_8f01e005093f7f492015-09-25Candidate
Massachusetts State AGbd_56503c9adb7456a92015-09-28 · +3dVerified

Name: Trump Hotel Collection
norm: trump hotel collection

Name: Trump Hotel Collection
norm: trump hotel collection
Industry: Hospitalityllm

Discovered: —
Breach occurred: May 19, 2014 – Jun 2, 2015
Materiality determined: —
Notification sent: Sep 25, 2015
Affected individuals: 3state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1074 Data Staged
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement, including the U.S. Secret Service and the Federal Bureau of Investigation

During the incident: Notified the financial institutions
Engaged an outside forensic expert to conduct an investigation of the incident
Removed the malware
Changed access credentials
Reconfiguring various components of our network and payment systems
Notified law enforcement, including the U.S. Secret Service and the Federal Bureau of Investigation
Changes made: Reconfiguring various components of our network and payment systems to further secure our payment card processing systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGSep 25 · first

New Hampshire State AGSep 25 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trump-hotel-collection-20150925.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2015
Raw hash: 757d47f8468c9027e18c9673e23d820cabedd4958728cc9ff7e25e1d76c2c470

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTrump Hotel Collection

Victim entityTrump Hotel Collection

IncidentUnknown

Stated responseNotified the financial institutions

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov