Westwood Country Club
bd_9f8585e0377ee29b · schema v1 · pii pii-v1
Full breach record for Westwood Country Club →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Meow on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
<p>Dear customers!<\/p><p>We are excited to offer exclusive access to over 31 GB of confidential data from Westwood Country Club, a prestigious private club located in Saint Louis, Missouri. Established in 1907, Westwood Country Club boasts a rich history, offering its members an array of recreational and social amenities, including an 18 hole golf course, tennis courts, swimming facilities, and dining options. Known for its classic charm, the club has evolved over the years to maintain its heritage while updating facilities to meet modern standards.<\/p><p>The golf course at Westwood is a key feature, designed to promote a walking first experience, complemented by a caddie program. Westwood adheres to a formal dress code for all activities, providing members with guidelines for golf, tennis, and social events. Membership grants exclusive access to various dining services, event reservations, and social functions, fostering a tight knit community.<\/p><p>This comprehensive data pack includes:<\/p><p>Employee data personal details, contact information<br>Member information contact details, marital status, club member recommendations<br>Contracts and agreements insurance policies, commercial agreements<br>Financial documents bank statements, credit agreements, invoices<br>Membership documents applications, operational documents<br>Sales and tax reports checks, receipts<br>Medical documents and consent forms child medical care consents, liability insurance certificates<br>And much more<br>This data pack provides valuable insights into Westwood Country Clubs operations and may be of significant interest to professionals in the private club industry, business analysis, and other stakeholders.<\/p><p>To gain access to this exclusive 31 GB data pack, simply click the Buy button and provide your contact details for registration. Our team will assist you in ensuring a secure a
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Oct 26, 2024
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Indiana State AGbd_0a073f689cb76fb42025-03-24 · +148dCandidate
- Maine State AGbd_2cb79ecfdcef8c8d2025-03-24 · +148dVerified
- Massachusetts State AGbd_8c54bfd0c2b6b8e62025-03-24 · +148dVerified
- Nebraska State AGbd_96ced4adf436fed12025-03-24 · +148dVerified
Show 1 more filing ↓Show fewer ↑up to 543d gap
- Maryland State AGbd_81c9fde4306f09902026-04-23 · +543dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Mar 24 (IN), last Apr 23 (MD) — a 395-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
meow
According to ransomware.live, Meow emerged in 2022 (resurfacing aggressively in 2024), initially operating as a RaaS using the Conti v2 codebase before transitioning to a data-extortion-only model — selling stolen data rather than encrypting files — with a heavy focus on US healthcare and medical research organizations.