HackingHospitalityHospitalityCustomer Data InvolvedIdentity (basic)Government IDMediumContained

The LINE Los Angeles

bd_c413bf7a4b58f09a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 26, 2025

Filed

Jul 24, 2026

To disclose

43 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for The LINE Los Angeles →

The LINE Los Angeles notified the California Attorney General of unauthorized access to its network between September 25 and October 1, 2025. The company became aware of the incident on September 26, 2025. The breach potentially exposed first and last names in combination with other personal information. The company engaged third-party specialists, conducted an internal investigation, and offered 12 months of complimentary credit monitoring to affected individuals. The incident is contained.

J jump to incidentP pin to compareR raw source

California clockDiscovered Sep 26, 2025 → Notified Jul 23, 2026300d ✗ CA 60-day late43 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 43 weeks / 301 days

Sep 25, 2025

Begins

Sep 26, 2025

Discovered

Jul 24, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: The LINE Los Angeles
norm: the line los angeles

Name: The LINE Los Angeles
norm: the line los angeles
Industry: Hospitalityllm

Discovered: Sep 26, 2025
Breach occurred: Sep 25, 2025 – Oct 1, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 23, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown

During the incident: Took immediate action to address and investigate the event
Engaged third-party specialists to assist with determining the nature and scope of the incident
Conducted a comprehensive review of the relevant information to determine the types of information present and to whom that information related
Conducted an internal investigation to determine the full scope of this incident
Implemented appropriate remediation measures
Arranged for enrollment in an online credit monitoring service for 12 months at no cost
Changes made: Implemented appropriate remediation measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 43 weeks(301 days from discovery to filing)
Compliance flags: CA 60-day late · 300dCA AG copy ≤15d · 1d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Sep 26, 2025
→ Notified: Jul 23, 2026
300d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
California
Consumers notified: Jul 23, 2026
→ AG copy submitted: Jul 24, 2026
1d 15 calendar days CA AG copy ≤15d

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Sep 26, 2025 → Notified: Jul 23, 2026	300d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late
California	Consumers notified: Jul 23, 2026 → AG copy submitted: Jul 24, 2026	1d	15 calendar days	CA AG copy ≤15d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-627077
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 24, 2026
Raw hash: 644d11ebc5ad1c3f8369850b18d8341423e489b05a210d14bfcb2f9553893831

Reporting entityThe LINE Los Angeles

Victim entityThe LINE Los Angeles

Incidentdiscovered Sep 26, 2025

Stated responseTook immediate action to address and investigate the event

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov