DisclosureLens
MalwareHospitalityHospitalityInfostealerData ExfiltratedCustomer Data InvolvedPCIFinancial accountFinancial credentialsIdentity (basic)LowResolved

HYATT HOTELS CORPORATION

bd_bc7429716d81c102 · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Jan 14, 2016

To disclose

Affected

Not disclosed

Linked

5 filings

Confidence

65%
Full breach record for HYATT HOTELS CORPORATION3 incidents on file

Hyatt Hotels Corporation disclosed a malware incident affecting payment card data at certain managed locations, primarily restaurants, between July 30, 2015, and December 8, 2015. Malware collected cardholder name, card number, expiration date, and verification code from onsite transactions. The investigation is complete, and systems have been secured. No other customer information was affected.

Incident timeline

Jul 30, 2015

Begins

Jan 14, 2016

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Washington State AGJan 14 · first
Montana State AGJan 14 · first
California State AGJan 14 · first · this page

Pattern: first filing Jan 14 (WA), last Jan 19 (SC) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.