HackingHospitalityHospitalityStolen CredentialsPhishingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountMediumContained

The Aviator Hotel (Farnborough) Limited

bd_d3fd203e4e346e6c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 23, 2026

Filed

Apr 21, 2026

To disclose

29 days

Affected · nationwide

1,4281 in this filing

Confidence

65%

Full breach record for The Aviator Hotel (Farnborough) Limited →

The Aviator Hotel (Farnborough) Limited reported a breach of its Rezlynx booking platform where unauthorized access was gained using stolen credentials of a Head Server. The incident affected 1,428 guests (1 in New Hampshire), exposing names, emails, phone numbers, and reservation details. The actor subsequently sent phishing emails to victims. The incident was contained on March 23, 2026, and notifications were sent on March 27, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 28 days

Mar 23, 2026

Begins

Mar 23, 2026

Discovered

Apr 21, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,428 affectedView incident

Name: The Aviator Hotel (Farnborough) Limited
norm: the aviator hotel farnborough

Name: The Aviator Hotel (Farnborough) Limited
norm: the aviator hotel farnborough
Industry: Hospitalityllm

Discovered: Mar 23, 2026
Breach occurred: Mar 23, 2026 – Mar 23, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Mar 27, 2026
Affected individuals: 1,428state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified the National Crime Agency in the UK
Initial access: valid_credentials

During the incident: The compromised account was secured by changing the login credentials
All other users of Rezlynx at the Aviator also had their login credentials changed
A full investigation began and a crisis group was formed
We have notified the insurers for the Aviator
We have notified the National Crime Agency in the UK
We have also notified the data subjects affected, apologised and provided advice on how they can take steps to protect themselves
Changes made: Software updates to latest versions
Device that was used to log in into Rezlynx was found to present an unusual screen and this device has now been wiped and will be securely destroyed
Measures will be implemented so that updates are regularly installed and cannot be rejected
The Aviator will now have a full cyber security review
Implemented additional technical and organisation measures to safeguard your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aviator-hotel-farnborough-20260421.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 21, 2026
Raw hash: 4cfa3ee852159612243df1416c05beee73479898c7ebc39c1a18d875283e8d30

Reporting entityThe Aviator Hotel (Farnborough) Limited

Victim entityThe Aviator Hotel (Farnborough) Limited

Incidentdiscovered Mar 23, 2026

Stated responseThe compromised account was secured by changing the login credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov