DisclosureLens
MalwareHospitalityRetail & ConsumerHospitalityData ExfiltratedCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)LowContained

Island Hotel Company - Atlantis Paradise Island

bd_a51f13dd392b3a62 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 21, 2016

Filed

Nov 23, 2016

To disclose

5 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%
Full breach record for Island Hotel Company - Atlantis Paradise Island2 incidents on file

Atlantis, Paradise Island disclosed a data security incident involving malware that may have captured payment card data (card number, expiration date, CVV, and sometimes cardholder name) from customers using debit or credit cards at food and beverage and retail locations between March 9, 2016, and October 22, 2016. The resort discovered suspicious files on October 21, 2016, and subsequently removed the malware to contain the incident. Hotel reservation payments and room charges were not affected. The number of affected individuals was not disclosed.

California clockDiscovered Oct 21, 2016Notified Nov 21, 201631d CA 60-day OK5 weeks discovery → filing

Incident timeline

undetected · 226 days
discovery → filing · 5 weeks / 33 days

Mar 9, 2016

Begins

Oct 21, 2016

Discovered

Nov 23, 2016

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
New Hampshire State AGNov 21 · first
Washington State AGNov 21 · first
California State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.