HackingHospitalityHospitalityStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Welk Resort Group, Inc.

bd_e90ad8f5a5b8cb35 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 2, 2018

Filed

Feb 22, 2019

To disclose

29 weeks

Affected

1,320state residents only

Linked

4 filings

Confidence

66%

Full breach record for Welk Resort Group, Inc. →3 incidents on file

Welk Resort Group, Inc. experienced unauthorized access to an employee email account between July 24, 2018, and August 2, 2018. The incident was discovered on August 2, 2018. Approximately 1,320 California residents were affected, with potential exposure of names, addresses, Social Security numbers, driver's license numbers, financial account numbers, and health information. The company engaged forensic investigators, contained the incident, and is providing credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 2, 2018 → Notified Feb 22, 2019204d ✗ CA 60-day late29 weeks discovery → filing

Incident timeline

undetected · 9 days

discovery → filing · 29 weeks / 204 days

Jul 24, 2018

Begins

Aug 2, 2018

Discovered

Feb 22, 2019

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_7c42c8e0b49b07012019-02-22Candidate
New Hampshire State AGbd_ad65323b3abe447f2019-02-22Verified
Massachusetts State AGbd_c2ab2e64693eee6e2019-02-22Verified

Name: Welk Resort Group, Inc.
norm: welk resort

Name: Welk Resort Group, Inc.
norm: welk resort
Industry: Hospitalityllm

Discovered: Aug 2, 2018
Breach occurred: Jul 24, 2018 – Aug 2, 2018
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 22, 2019
Affected individuals: 1,320state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified California Attorney GeneralProviding notice to other state regulators

During the incident: Immediately began an investigation to confirm the security of its network
Engaged third-party forensic investigators
Mailing written notice to potentially affected individuals
Offering 12 months of credit and identity monitoring services through TransUnion
Providing guidance on how to better protect against identity theft and fraud
Providing notice to other state regulators and the credit reporting agencies
Changes made: Working to enhance existing security measures
Confirming the ongoing security of networks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(204 days from discovery to filing)
Compliance flags: CA 60-day late · 204d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 2, 2018
→ Notified: Feb 22, 2019
204d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 2, 2018 → Notified: Feb 22, 2019	204d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGFeb 22 · first

New Hampshire State AGFeb 22 · first

Massachusetts State AGFeb 22 · first

California State AGFeb 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-144939
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2019
Raw hash: 94f638fd254d0cbfb33b5572fd595c1e4f787a4f18aa80fd289185b8ab27e035

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWelk Resort Group, Inc.

Victim entityWelk Resort Group, Inc.

Incidentdiscovered Aug 2, 2018

Stated responseImmediately began an investigation to confirm the security of its network

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov