MalwareTargetedPCIFINANCIAL_ACCOUNTPIILowResolved
Noble House Hotels & Resorts
bd_a22708c9b9588dca · schema v1 · pii pii-v1
Full breach record for Noble House Hotels & Resorts →Noble House Hotels & Resorts notified customers of a malware infection on payment processing systems at multiple properties. The incident, discovered in September 2016, potentially compromised payment card data (magnetic stripe data, CVV) from April to August 2016. The company engaged a security firm and was notified by the Secret Service.
California clockDiscovered Sep 2, 2016 → Notified Sep 2, 20160d ✓ CA 60-day OK≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f32c3b337703fea6Oregon State AGfiled 2016-09-02Candidate
- bd_b13c38642c8c54f7New Hampshire State AGfiled 2016-08-24(9d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-63728
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 2, 2016
- Raw hash
- bc65f665d5f5d57b346da45259d5a2da4b5af8381591a9afd10adced60ba257e
Reporting entity
- Name
- Noble House Hotels & Resortsnorm: noble house hotels resorts
Victim entity
- Name
- Noble House Hotels & Resortsnorm: noble house hotels resorts
Incident
- Discovered
- Sep 2, 2016
- Materiality determined
- Sep 2, 2016
- Notification sent
- Sep 2, 2016
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNTPII
- Attack vector
- Unknown
- MITRE ATT&CK
- T1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified by the Secret Service
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 2, 2016→ Notified: Sep 2, 20160d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.