HackingHospitalityHospitalityStolen CredentialsTargetedPIIIdentity (basic)LowContained

Atlantis Paradise Island

bd_c8d66601d5141386 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 8, 2021

To disclose

—

Affected

8state residents only

Linked

6 filings

Confidence

68%

Atlantis Paradise Island notified Montana residents of a data breach where an unauthorized party accessed a server containing personal information. The company engaged forensic experts, notified law enforcement, and offered one year of identity monitoring via Kroll. No specific data types or affected counts were detailed in this template letter.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 8, 2021

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_08d4291cdeccca272021-03-08Verified
Massachusetts State AGbd_b9b213723ca1ee022021-03-09 · +1dVerified
California State AGbd_bfbd49781fafcf582021-03-09 · +1dVerified
Maine State AGbd_d92188ea70d8b96e2021-03-09 · +1dVerified

Show 1 more filing ↓up to 3d gap

New Hampshire State AGbd_392e6d3a08a4e9c32021-03-11 · +3dVerified

Name: Island Hotel Company Limited
norm: island hotel

Name: Atlantis Paradise Island
norm: atlantis paradise island
Industry: Hospitalityllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 8state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement authorities
Initial access: valid_credentials

During the incident: Engaged leading cyber security experts to assist us in a forensic investigation
Notified law enforcement authorities
Offering complimentary identity monitoring services through Kroll for one year
Changes made: Taken steps to further strengthen and enhance systems’ security in our network
Updating administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGMar 8 · first

Montana State AGMar 8 · first · this page

Massachusetts State AG+1d

California State AG+1d

Maine State AG+1d

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/atlSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 8, 2021
Raw hash: 729c3c67355e6645b2eef6b0230daa2c10c30c76d61606d3a9ee3f0b19d54e1d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityIsland Hotel Company Limited

Victim entityAtlantis Paradise Island

IncidentUnauthorized Access

Stated responseEngaged leading cyber security experts to assist us in a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov