Resort Data Processing
bd_9dcdd5d44158e3b0 · schema v1 · pii pii-v1
Full breach record for Resort Data Processing →4 incidents on fileResort Data Processing, Inc., a property management software provider, disclosed a cybersecurity attack against its online booking system. Attackers used malicious code to exploit a software vulnerability and acquire credit/debit card information (including numbers, expiration dates, and security codes) as well as names, addresses, and email addresses. The incident involved two periods of malicious activity: January 2019 to May 2019, and February 2021 to June 2021. The company became aware of suspicious activity on June 14, 2021, terminated attacker access, and deployed a patch. Forensic investigation confirmed the breach. No specific count of affected individuals was disclosed in the notice.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 1, 2019
Begins
Jun 14, 2021
Discovered
Jul 22, 2021
Filed
vs. sector median
13 wks faster
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- Oregon State AGbd_7ff3dec2010370682021-07-22Verified
- New Hampshire State AGbd_8d365a8625c524b12021-07-22Verified
- Montana State AGbd_26e0d8d5acfcd4f82021-07-23 · +1dVerified
- Massachusetts State AGbd_9f4b7050f82829782021-07-23 · +1dVerified
Show 5 more filings ↓Show fewer ↑up to 8d gap
- Montana State AGbd_ccfadf2ce48081122021-07-23 · +1dVerified
- Montana State AGbd_8b312adb02cdb1752021-07-27 · +5dVerified
- Maine State AGbd_32db99b757ca2d672021-07-14 · +8dCandidate
- Indiana State AGbd_602f99f557079f092021-07-14 · +8dVerified
- Washington State AGbd_78e25fe4ecbfdb012021-07-14 · +8dVerified
Filing propagation · 10 filings · 8 states
View merged incident ↗Pattern: first filing Jul 14 (ME), last Jul 27 (MT) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.