MalwareRansomwareData EncryptedFINANCIAL_ACCOUNTCREDENTIALSLowResolved
Noble House Hotels & Resorts
bd_e2f8c5fd4eb0c17c · schema v1 · pii pii-v1
Full breach record for Noble House Hotels & Resorts →Noble House Hotels and Resorts notified guests of a malware incident affecting payment card data at multiple properties from Dec 2014 to Aug 2015. The malware compromised magnetic stripe data (card numbers, CVVs). The company notified the FBI and engaged a security firm. No specific count of affected individuals was provided in the filing.
California clockDiscovered Aug 11, 2015 → Notified Nov 12, 201593d ✗ CA 60-day late13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d4d28c3e1db2a060Washington State AGfiled 2015-11-13Verified
- bd_86c0d979209ba137California State AGfiled 2015-10-22(22d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-58832
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2015
- Raw hash
- f93430cb3efae3a61d896e4088a539727f210d35b6b2b461488926c3f564d0ea
Reporting entity
- Name
- Noble House Hotels & Resortsnorm: noble house hotels resorts
Victim entity
- Name
- Noble House Hotels & Resortsnorm: noble house hotels resorts
Incident
- Discovered
- Aug 11, 2015
- Materiality determined
- —
- Notification sent
- Nov 12, 2015
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unknown
- MITRE ATT&CK
- T1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBI
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 13 weeks(94 days from discovery to filing)
- Compliance flags
- CA 60-day late · 93d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 11, 2015→ Notified: Nov 12, 201593d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.