HackingHospitalityHospitalityStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainIdentity (basic)Government IDPIIMediumActive

Sands Casino Resort Bethlehem

bd_bc5f7d427d883827 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2014

Filed

Feb 28, 2014

To disclose

18 days

Affected

17state residents only

Confidence

68%

Full breach record for Sands Casino Resort Bethlehem →2 incidents on file

Sands Casino Resort Bethlehem disclosed a data breach affecting 17 New Hampshire residents. Unauthorized access occurred on Feb 10, 2014, exposing employee and customer PII including SSNs and driver's licenses. Affected individuals were offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Feb 10, 2014

Discovered

Feb 28, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed17 affectedView incident

Name: Sands Casino Resort Bethlehem
norm: sands casino resort bethlehem

Name: Sands Casino Resort Bethlehem
norm: sands casino resort bethlehem
Industry: Hospitalityllm

Discovered: Feb 10, 2014
Materiality determined: —
Notification sent: —
Affected individuals: 17state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Notified all affected individuals and state agencies and entities
Notified New Hampshire individuals
Offering a free one-year membership to Experian’s ProtectMyID Elite to help protect your identity
Law enforcement and forensic experts are continuing to investigate the incident
Changes made: Taking measures to address this incident and to reduce the risk of additional harm
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sands-casino-resort-20140228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2014
Raw hash: e3fd1eea05329ecef38bee81b4f611def1a9a477c65b0db7122f48620720b4cd

Reporting entitySands Casino Resort Bethlehem

Victim entitySands Casino Resort Bethlehem

Incidentdiscovered Feb 10, 2014

Stated responseNotified all affected individuals and state agencies and entities

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov