HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
GOOGLE LLC
bd_b5e394129ad81fbf · schema v1 · pii pii-v1
Full breach record for GOOGLE LLC →Google Inc. notified California AG that unauthorized access to Sabre Hospitality Solutions' SynXis CRS compromised hotel reservation data for Google travelers. Incident occurred Aug 2016–Mar 2017. Data included names, contact info, and payment card data. Google engaged cybersecurity firm and offered 24 months credit monitoring.
California clockDiscovered Jun 16, 2017 → Notified Jun 29, 201713d ✓ CA 60-day OK13 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_03dbc73034f2d123Montana State AGfiled 2017-07-06(7d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-99961
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 29, 2017
- Raw hash
- 0d927b8bff7d72bfbb6ddbd512aca5895bcc45ef311ee5c5131e3a249ebfa82d
Reporting entity
- Name
- GOOGLE LLCnorm: google
Victim entity
- Name
- GOOGLE LLCnorm: google
Incident
- Discovered
- Jun 16, 2017
- Materiality determined
- —
- Notification sent
- Jun 29, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Sabre notified law enforcement and the payment card brands about this incident
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 13d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 16, 2017→ Notified: Jun 29, 201713d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.