MalwareHospitalityHospitalityRansomwareData ExfiltratedPCIFinancial accountFinancial credentialsLowContained

Noble House Hotels & Resorts

bd_c2732f57322892f2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 2, 2016

Filed

Sep 2, 2016

To disclose

≤1 day

Affected

34state residents only

Linked

9 filings

Confidence

64%

Full breach record for Noble House Hotels & Resorts →3 incidents on file

Noble House Hotels & Resorts notified the NH AG of a malware incident affecting payment card systems at multiple properties from April-August 2016. 34 NH residents were notified. Compromised data included card numbers, expiration dates, and CVVs.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 130 days

discovery → filing · ≤1 day / 0 days

Apr 25, 2016

Begins

Sep 2, 2016

Discovered

Sep 2, 2016

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_742fd0ea77ecc86f2016-09-02Verified
Washington State AGbd_7f17a96003d1419e2016-09-02Verified
Montana State AGbd_81a86fd722a970602016-09-02Verified
California State AGbd_a22708c9b9588dca2016-09-02Verified

Show 4 more filings ↓up to 9d gap

Oregon State AGbd_f32c3b337703fea62016-09-02Verified
Montana State AGbd_236fd75e6467b7742016-08-24 · +9dCandidate
New Hampshire State AGbd_b13c38642c8c54f72016-08-24 · +9dVerified
Massachusetts State AGbd_b32d17dcc8a377e72016-08-24 · +9dVerified

Name: BAKER & HOSTETLER LLP
norm: baker hostetler

Name: Noble House Hotels & Resorts
norm: noble house hotels resorts
Industry: Hospitalityllm

Discovered: Sep 2, 2016
Breach occurred: Apr 25, 2016 – Aug 5, 2016
Undetected for: 130 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 2, 2016
Affected individuals: 34state-resident count only
Data types: PCIFinancial accountFinancial credentials
Attack vector: Unknown
MITRE ATT&CK: T1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Notified by the Secret Service about possible fraudulent activity on the payment card system

During the incident: Engaged a computer security firm to examine the payment systems at all of the properties it manages for any signs of an issue
Established a dedicated call center to assist individuals with any questions they may have regarding the incident
Providing substitute notification to New Hampshire residents by posting a statement on the home page of its website and by issuing a press release
Changes made: Working with the computer security firm to ensure that this issue has been fully remediated
Reviewing and enhancing its security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 6 states

View merged incident ↗

Montana State AGAug 24 · first

New Hampshire State AGAug 24 · first

Massachusetts State AGAug 24 · first

Massachusetts State AG+9d

Washington State AG+9d

Montana State AG+9d

California State AG+9d

Oregon State AG+9d

New Hampshire State AG+9d · this page

Pattern: first filing Aug 24 (MT), last Sep 2 (NH) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/noble-house-hotels-20160902.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 2, 2016
Raw hash: c3eb54ca953d3bb696a169566a4117dc03d576b804e880e81a95b11783e5dd2c

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityBAKER & HOSTETLER LLP

Victim entityNoble House Hotels & Resorts

Incidentdiscovered Sep 2, 2016

Stated responseEngaged a computer security firm to examine the payment systems at all of the properties it manages for any signs of an issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov