HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Virgin Hotels North America
bd_b0fa16e1228794ad · schema v1 · pii pii-v1
Full breach record for Virgin Hotels North America →Virgin Hotels North America, LLC notified consumers of unauthorized network access detected on August 31, 2023. The incident involved access to storage server files containing names and variable data. The company engaged a cybersecurity firm, enhanced security measures, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday26 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_138b00b8228688c0Maine State AGfiled 2024-03-01Candidate
- bd_152266d09ccfad1cMontana State AGfiled 2024-03-01Candidate
- bd_b95794a5cae69bc2Indiana State AGfiled 2024-03-01Verified
- bd_c0007bf5d2d9116eNew Hampshire State AGfiled 2024-03-01Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-01-virgin-hotels-north-america-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2024
- Raw hash
- a449027f341536b9f3ac08d36a210c449df86b199d43139d4283d0e112871689
Reporting entity
- Name
- Virgin Hotels North Americanorm: virgin hotels north america
Victim entity
- Name
- Virgin Hotels North Americanorm: virgin hotels north america
Incident
- Discovered
- Aug 31, 2023
- Materiality determined
- —
- Notification sent
- Mar 1, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.