MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedPCIFinancial accountMediumContained

Best American Hospitality Corp.

bd_a2840b1c904058c6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 27, 2016

Filed

Apr 21, 2017

To disclose

16 weeks

Affected

8,165state residents only

Confidence

68%

Full breach record for Best American Hospitality Corp. →

Best American Hospitality Corp. reported malware installed on POS systems at multiple restaurant locations, compromising payment card data (track data) from Dec 27, 2016, to March 6, 2017. The incident affected customers across multiple states. Kroll Cyber Security was engaged to investigate and contain the malware.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due16 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 16 weeks / 115 days

Dec 27, 2016

Begins

Dec 27, 2016

Discovered

Apr 21, 2017

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8,165 affectedView incident

Name: Best American Hospitality Corp.
norm: best american hospitality
Domain: bestamericanhospitality.com

Name: Best American Hospitality Corp.
norm: best american hospitality
Domain: bestamericanhospitality.com
Industry: Retail & Consumerllm

Discovered: Dec 27, 2016
Breach occurred: Dec 27, 2016 – Mar 6, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 8,165state-resident count only
Data types: PCIFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Initial access: external_remote_services

During the incident: Hired Kroll Cyber Security, LLC to examine payment card processing systems
Working with Kroll Cyber Security to review security measures
Working with payment card networks to notify issuing banks
Initiated heightened monitoring on affected cards
Changes made: Malware was contained on March 6, 2017
Evaluated ways to enhance security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(115 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2017/BestAmericanHospitalityCorp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 21, 2017
Raw hash: fae5d637469a48662220bfa7235db6b34f77cf41e373d0826506e498b90cd1a4

Reporting entityBest American Hospitality Corp.

Victim entityBest American Hospitality Corp.

Incidentdiscovered Dec 27, 2016

Stated responseHired Kroll Cyber Security, LLC to examine payment card processing systems

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov