Resort Data Processing
bd_9dcdd5d44158e3b0 · schema v1 · pii pii-v1
Full breach record for Resort Data Processing →4 incidents on fileResort Data Processing, Inc., a property management software provider, disclosed a cybersecurity attack against its online booking system. Attackers used malicious code to exploit a software vulnerability and acquire credit/debit card information (including numbers, expiration dates, and security codes) as well as names, addresses, and email addresses. The incident involved two periods of malicious activity: January 2019 to May 2019, and February 2021 to June 2021. The company became aware of suspicious activity on June 14, 2021, terminated attacker access, and deployed a patch. Forensic investigation confirmed the breach. No specific count of affected individuals was disclosed in the notice.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 1, 2019
Begins
Jun 14, 2021
Discovered
Jul 22, 2021
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- Oregon State AGbd_7ff3dec2010370682021-07-22Verified
- New Hampshire State AGbd_8d365a8625c524b12021-07-22Verified
- Montana State AGbd_26e0d8d5acfcd4f82021-07-23 · +1dVerified
- Massachusetts State AGbd_9f4b7050f82829782021-07-23 · +1dVerified
Show 5 more filings ↓Show fewer ↑up to 8d gap
- Montana State AGbd_ccfadf2ce48081122021-07-23 · +1dVerified
- Montana State AGbd_8b312adb02cdb1752021-07-27 · +5dVerified
- Maine State AGbd_32db99b757ca2d672021-07-14 · +8dCandidate
- Indiana State AGbd_602f99f557079f092021-07-14 · +8dVerified
- Washington State AGbd_78e25fe4ecbfdb012021-07-14 · +8dVerified
Filing propagation · 10 filings · 8 states
View merged incident ↗Pattern: first filing Jul 14 (ME), last Jul 27 (MT) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.