HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Noble House Hotels & Resorts
bd_b13c38642c8c54f7 · schema v1 · pii pii-v1
Full breach record for Noble House Hotels & Resorts →Noble House Hotels & Resorts notified the New Hampshire Attorney General on August 24, 2016, regarding a payment card system compromise at Ocean Key Resort & Spa. Unauthorized access occurred between April 26 and June 8, 2016, potentially affecting 13 New Hampshire residents. Compromised data included payment card numbers, expiration dates, and CVV numbers. The company engaged a security firm, established a call center, and provided substitute notification via website postings and press releases.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a22708c9b9588dcaCalifornia State AGfiled 2016-09-02(9d gap)Verified
- bd_f32c3b337703fea6Oregon State AGfiled 2016-09-02(9d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/noble-house-hotels-20160824.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 24, 2016
- Raw hash
- 1ccf781bf931e93912a52cf1ebfa079807037754d8ad35da61ef9a1ce189be99
Reporting entity
- Name
- BAKER & HOSTETLER LLPnorm: baker hostetler
Victim entity
- Name
- Noble House Hotels & Resortsnorm: noble house hotels resorts
Incident
- Discovered
- Jul 26, 2016
- Materiality determined
- —
- Notification sent
- Aug 24, 2016
- Affected individuals
- 13
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Office of the Attorney General (Joseph Foster)
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.