MalwareHospitalityHospitalityInfostealerCustomer Data InvolvedDelayed DiscoveryFinancial accountFinancial credentialsIdentity (basic)LowContained

Rosen Hotels & Resorts

bd_b16dffb998cfb400 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 3, 2016

Filed

Mar 4, 2016

To disclose

4 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for Rosen Hotels & Resorts →

Rosen Hotels & Resorts disclosed a payment card data breach affecting guests who used cards between September 2, 2014, and February 18, 2016. Malware installed on the payment network captured magnetic stripe data, including card numbers, expiration dates, and verification codes. The incident was discovered on February 3, 2016, after reports of unauthorized charges. The company engaged forensic experts, contained the incident, and implemented enhanced security measures.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 3, 2016 → Notified Mar 4, 201630d ✓ CA 60-day OK4 weeks discovery → filing

Incident timeline

undetected · 519 days

discovery → filing · 4 weeks / 30 days

Sep 2, 2014

Begins

Feb 3, 2016

Discovered

Mar 4, 2016

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_4f7660b0923ac5ed2016-03-04Candidate
New Hampshire State AGbd_cc33a49c08666b862016-03-04Verified
Massachusetts State AGbd_5b489425d8f6ac392016-03-08 · +4dVerified

Name: Rosen Hotels & Resorts
norm: rosen hotels resorts
Domain: rosenhotels.com

Name: Rosen Hotels & Resorts
norm: rosen hotels resorts
Domain: rosenhotels.com
Industry: Hospitalityllm

Discovered: Feb 3, 2016
Breach occurred: Sep 2, 2014 – Feb 18, 2016
Undetected for: 519 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 4, 2016
Affected individuals: Not disclosed
Data types: Financial accountFinancial credentialsIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1056 Input CaptureT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Supporting law enforcement’s investigation

During the incident: Initiated an investigation into these reports
Hired a leading cyber security firm to examine our payment card processing system
Working with the payment card networks to identify the potentially affected cards
Supporting law enforcement’s investigation
Established a dedicated helpline
Changes made: Implemented additional, enhanced security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: CA 60-day OK · 30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 3, 2016
→ Notified: Mar 4, 2016
30d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 3, 2016 → Notified: Mar 4, 2016	30d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGMar 4 · first

New Hampshire State AGMar 4 · first

California State AGMar 4 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-60301
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2016
Raw hash: 594d205105d4e7bcd7278e82ad6ce6183d32a82aa1e4cb29123bf5a44d0d54b2

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityRosen Hotels & Resorts

Victim entityRosen Hotels & Resorts

Incidentdiscovered Feb 3, 2016

Stated responseInitiated an investigation into these reports

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov