Social EngineeringHospitalityPhishingStolen CredentialsCustomer Data InvolvedSupply Chain (3P Vendor)PIILowContained
Hotel Vermont
bd_e3d45b37805663c5 · schema v1 · pii pii-v1
Full breach record for Hotel Vermont →Hotel Vermont, a hospitality company, reported a data breach affecting 7 Maine residents. The breach occurred when an employee's credentials for a third-party online reservation service, TravelClick, were compromised through a phishing email on January 21, 2021. A cybercriminal, posing as a TravelClick representative, used the stolen credentials to access guest reservation information within TravelClick's database. The breach was discovered on March 11, 2021, and affected individuals were notified on April 6, 2021.
Maine clockDiscovered Mar 11, 2021 → Filed with AG Apr 6, 202126d ✓ ME AG ≤30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b8a76763-1e8d-47e5-90f5-ac98655ccc5c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 6, 2021
- Raw hash
- fa7a679e44ef6faf4224a9414993be8b1f48268c1281b959539f814f2dc073d6
Reporting entity
- Name
- Hotel Vermontnorm: hotel vermont
Victim entity
- Name
- Hotel Vermontnorm: hotel vermont
- Industry
- Hospitalityllm
Incident
- Discovered
- Mar 11, 2021
- Materiality determined
- —
- Notification sent
- Apr 6, 2021
- Affected individuals
- 7
- Data types
- PII
- Attack vector
- Phishing
- Threat actor
- External
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 11, 2021→ Filed with AG: Apr 6, 202126d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.