HackingHospitalityHospitalityCustomer Data InvolvedPIIIdentity (basic)LowContained

Island Hotel Company Limited

bd_bfbd49781fafcf58 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 9, 2021

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

64%

Full breach record for Island Hotel Company Limited →3 incidents on file

Island Hotel Company Limited (d/b/a Atlantis Paradise Island) reported unauthorized access to a computer server containing company information between October 17 and October 19, 2020. The incident potentially exposed personal information of customers. The company engaged forensic experts, notified law enforcement, and offered one year of identity monitoring services through Kroll. No specific data types or affected counts were disclosed in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 17, 2020

Begins

Mar 9, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_b9b213723ca1ee022021-03-09Verified
Maine State AGbd_d92188ea70d8b96e2021-03-09Verified
Indiana State AGbd_08d4291cdeccca272021-03-08 · +1dVerified
Montana State AGbd_c8d66601d51413862021-03-08 · +1dCandidate

Show 1 more filing ↓up to 2d gap

New Hampshire State AGbd_392e6d3a08a4e9c32021-03-11 · +2dVerified

Name: Island Hotel Company Limited
norm: island hotel

Name: Island Hotel Company Limited
norm: island hotel
Also named: Island Hotel Company Limiteddba oflegal entity
Atlantis Paradise Islanddba oftrade name
Industry: Hospitalityllm

Discovered: —
Breach occurred: Oct 17, 2020 – Oct 19, 2020
Materiality determined: —
Notification sent: May 31, 2021
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Engaged leading cyber security experts to assist in a forensic investigation
Notified law enforcement authorities
Offering complimentary identity monitoring services through Kroll for one year
Changes made: Updating administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGMar 8 · first

Montana State AGMar 8 · first

Massachusetts State AG+1d

Maine State AG+1d

California State AG+1d · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-538996
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 9, 2021
Raw hash: 483cce04f6efe5edde61eb84e1544a966a056f4cd6cda8737731d68fc29400ae

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityIsland Hotel Company Limited

Victim entityIsland Hotel Company Limited

IncidentUnknown

Stated responseEngaged leading cyber security experts to assist in a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov