HackingHospitalityHospitalityData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Flamingo Resort and Spa

bd_bad39f99aa31f146 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 21, 2013

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for Flamingo Resort and Spa →

Flamingo Resort and Spa notified California employees of a cybersecurity incident involving a virus on the payroll computer. The incident potentially exposed personal information including Social Security numbers, dates of birth, home addresses, phone numbers, and bank routing numbers. The company recommended employees place fraud alerts on their credit files and provided contact information for credit reporting agencies.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Nov 21, 2013

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Flamingo Resort and Spa
norm: flamingo resort and

Name: Flamingo Resort and Spa
norm: flamingo resort and
Industry: Hospitalityllm

Discovered: —
Breach occurred: Nov 1, 2024 – Dec 1, 2024
Materiality determined: —
Notification sent: Dec 15, 2024
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Submitted breach notification to California Office of Privacy Protection
Initial access: exploit_public_facing

During the incident: Notified affected employees
Recommended placing a fraud alert on credit files
Provided contact information for Equifax, Experian, and Trans Union
Changes made: Taking further measures to ensure this will not happen in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-43343
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2013
Raw hash: 0866e2ce60309c475bc1afbea8f729d7e3f8f22f5e38d48efb10e40ecfeb8194

Reporting entityFlamingo Resort and Spa

Victim entityFlamingo Resort and Spa

IncidentUnauthorized Access

Stated responseNotified affected employees

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov