HackingOtherData ExfiltratedCustomer Data InvolvedPIILowContained

JC Resorts

bd_f42c4e2774364fa1 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 28, 2026

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

84%

Full breach record for JC Resorts →

JC Resorts LLC notified individuals that on January 19, 2026, an unauthorized actor viewed and copied certain files stored within its computer network. A forensic review identified personal information (categories templated as [Extra1] plus name) belonging to affected individuals. JC Resorts engaged outside cybersecurity specialists, secured the network, notified law enforcement and regulators, and is offering 24 months of Experian IdentityWorks credit monitoring/identity protection. Notification letters were dated April 28, 2026. The total number of affected individuals is not stated in the sample notice.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jan 19, 2026

Begins

Apr 28, 2026

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 99 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteqilinbd_120ae0978d45e0de2026-02-14 · +73dVerified by operator
Leak Siteqilinbd_edd06f07c59276f92026-01-19 · +99dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_253b3923102e86fb2026-04-28Verified
Nebraska State AGbd_475e4deee530a7832026-04-28Verified by operator
Indiana State AGbd_541e92e669c9efa72026-04-28Verified
Massachusetts State AGbd_7918dbaf98188e742026-04-28Verified by operator

Name: JC Resorts
norm: jc resorts
Domain: jcresorts.com

Name: JC Resorts
norm: jc resorts
Domain: jcresorts.com
Industry: Hospitality/Resorts
Industry: Otherllm

Discovered: —
Breach occurred: Jan 19, 2026
Materiality determined: —
Notification sent: Apr 28, 2026
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Reported to law enforcement and other regulators as applicable

During the incident: Engaged outside cybersecurity specialists
Secured the network
Investigated nature and scope of activity
Notified affected individuals
Reported to law enforcement and regulators
Offered 24 months of Experian IdentityWorks credit monitoring and identity protection
Changes made: Implemented additional safeguards to protect data
Reviewing and enhancing protections
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGApr 28 · first

Nebraska State AGApr 28 · first

Indiana State AGApr 28 · first

Massachusetts State AGApr 28 · first

California State AGApr 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-622428
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 28, 2026
Raw hash: e140444b311c15bd365f5c4e6b958d23dc40b0ab1997db2dccbc2b23759386c6

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityJC Resorts

Victim entityJC Resorts

IncidentUnauthorized Access

Stated responseEngaged outside cybersecurity specialists

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov