DisclosureLens
MalwareHospitalityHospitalityCapture App DataInfostealerData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPCIIdentity (basic)Financial accountFinancial credentialsLowResolved

HILTON WORLDWIDE HOLDINGS INC.

bd_a7c1b60b6a8d4dfd · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Nov 24, 2015

To disclose

Affected

Not disclosed

Linked

5 filings

Confidence

77%
Full breach record for HILTON WORLDWIDE HOLDINGS INC.

Hilton Worldwide disclosed a point-of-sale malware incident affecting payment card data at its hotels. The malware ran during two windows: November 18–December 5, 2014 and April 21–July 27, 2015. Cardholder names, payment card numbers, security codes, and expiration dates were targeted. No addresses or PINs were compromised. Hilton worked with third-party forensic experts, law enforcement, and payment card companies. One year of complimentary credit monitoring through AllClear was offered to affected customers.

Incident timeline

Nov 18, 2014

Begins

Nov 24, 2015

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Washington State AGNov 24 · first
Massachusetts State AGNov 24 · first
Montana State AGNov 24 · first
California State AGNov 24 · first · this page

Pattern: first filing Nov 24 (WA), last Dec 3 (SC) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.