DisclosureLens
MalwareHospitalityHospitalityCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountLowContained

Key West Hotels, LLC

bd_ccc0148a8a68acdf · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 13, 2018

Filed

Apr 2, 2019

To disclose

16 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%
Full breach record for Key West Hotels, LLC

Key West Hotels, LLC disclosed that an unauthorized person gained access to the front desk computer system of The Key Ambassador Resort Inn using malware. The intrusion occurred between February 7, 2018, and December 13, 2018, but was not discovered until December 13, 2018. The intruder may have viewed guest names, addresses, phone numbers, frequent guest account numbers, and partial credit/debit card numbers. The malware was removed, and technical safeguards were implemented.

Incident timeline

undetected · 309 days
discovery → filing · 16 weeks / 110 days

Feb 7, 2018

Begins

Dec 13, 2018

Discovered

Apr 2, 2019

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 59d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGFeb 2 · first
California State AG+59d · this page

Pattern: first filing Feb 2 (MT), last Apr 5 (NH) — a 62-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.