MalwareHospitalityHospitalityRansomwareData EncryptedTargetedFinancial accountFinancial credentialsPIILowContained

Wilderness Hotel and Golf Resort

bd_c97fbe91394ce4b3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 8, 2015

Filed

Nov 20, 2015

To disclose

6 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Wilderness Hotel and Golf Resort →

Wilderness Resort (WI) disclosed a data security incident affecting guests who used payment cards between March 9, 2015 and June 8, 2015. Malware was discovered on October 8, 2015, compromising card numbers, expiration dates, and CVVs. The resort engaged forensic investigators, removed the malware, and offered one year of free credit monitoring. No specific count of affected individuals was provided.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 213 days

discovery → filing · 6 weeks / 43 days

Mar 9, 2015

Begins

Oct 8, 2015

Discovered

Nov 20, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Wilderness Hotel and Golf Resort
norm: wilderness hotel and golf resort
Domain: wildernessresort.com

Name: Wilderness Hotel and Golf Resort
norm: wilderness hotel and golf resort
Domain: wildernessresort.com
Industry: Hospitalityllm

Discovered: Oct 8, 2015
Breach occurred: Mar 9, 2015 – Jun 8, 2015
Undetected for: 213 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 23, 2015
Affected individuals: Not disclosed
Data types: Financial accountFinancial credentialsPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1059 Command and Scripting Interpreter
Threat actor: ExternalFinancial

During the incident: Engaged third-party forensic investigators
Removed the malware
Implemented additional security measures
Offered one free year of credit monitoring
Changes made: Implemented additional security measures to prevent unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Wilderness-Hotel-and-Golf-Resort.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2015
Raw hash: 4fbf0d99ccd9263c8edfb7f13c5f7d052d5dd34d922e1da3a07b4cde751523a6

Reporting entityWilderness Hotel and Golf Resort

Victim entityWilderness Hotel and Golf Resort

Incidentdiscovered Oct 8, 2015

Stated responseEngaged third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov