HackingHospitalityHospitalityStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedPCIFinancial accountFinancial credentialsIdentity (basic)LowContained

Remington Lodging & Hospitality

bd_cb2507defe8d7e16 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 6, 2017

Filed

Jul 18, 2017

To disclose

6 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for Remington Lodging & Hospitality →

Remington Lodging & Hospitality, LLC reported a data breach affecting its Sabre Hospitality Solutions reservation system. Unauthorized access occurred between August 10, 2016, and March 9, 2017, via stolen account credentials. Payment card data (including CVV) and guest PII were accessed. Sabre engaged forensic investigators and notified law enforcement.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 6, 2017 → Notified Jul 14, 201738d ✓ CA 60-day OK6 weeks discovery → filing

Incident timeline

undetected · 300 days

discovery → filing · 6 weeks / 42 days

Aug 10, 2016

Begins

Jun 6, 2017

Discovered

Jul 18, 2017

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_b5797d39e4e4fc022017-07-18Verified
Massachusetts State AGbd_92f08e08d29d5deb2017-07-19 · +1dVerified
Montana State AGbd_7defb1b8fa5a53312017-07-17 · +1dCandidate

Name: Remington Lodging & Hospitality
norm: remington lodging hospitality
Domain: remingtonhotels.com

Name: Remington Lodging & Hospitality
norm: remington lodging hospitality
Domain: remingtonhotels.com
Industry: Hospitalityllm

Discovered: Jun 6, 2017
Breach occurred: Aug 10, 2016 – Mar 9, 2017
Undetected for: 300 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 14, 2017
Affected individuals: Not disclosed
Data types: PCIFinancial accountFinancial credentialsIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementNotified payment card brands
Third party: via Sabre Hospitality Solutions
Initial access: valid_credentials

During the incident: Engaged a leading cybersecurity firm to support its investigation
Notified law enforcement
Notified the payment card brands
Changes made: Took successful measures to ensure this unauthorized access was stopped and is no longer possible
Strengthened cybersecurity program
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: CA 60-day OK · 38d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 6, 2017
→ Notified: Jul 14, 2017
38d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 6, 2017 → Notified: Jul 14, 2017	38d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJul 17 · first

New Hampshire State AG+1d

California State AG+1d · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-100387
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 18, 2017
Raw hash: d0e04326d588779a27a83b469866da8f732aee68fc2deac58aefe63fee1a793b

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityRemington Lodging & Hospitality

Victim entityRemington Lodging & Hospitality

Incidentdiscovered Jun 6, 2017

Stated responseEngaged a leading cybersecurity firm to support its investigation

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov