DisclosureLens
AccidentalHospitalityHospitalityMisconfigurationCustomer Data InvolvedAuthenticationFinancial accountFinancial credentialsIdentity (basic)MediumResolved

CHOICE HOTELS INTERNATIONAL INC /DE

bd_ff0c6471398ec38b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 12, 2019

Filed

Nov 29, 2019

To disclose

17 days

Affected · nationwide

88,0001,684 in this filing

Linked

7 filings

Confidence

71%
Full breach record for CHOICE HOTELS INTERNATIONAL INC /DE →3 incidents on file

Choice Hotels International disclosed an inadvertent disclosure of guest data to third-party tracking vendors. Due to a Safari browser crash bug, data entered on reservation pages (names, emails, payment card numbers, CVVs) was appended to URLs and sent to trackers. The incident affected approx. 88,000 individuals from June 2015 to Nov 2019. Choice identified 1,684 Washington residents for direct notice and issued a press release for earlier unidentifiable cases.

Incident timeline

undetected · 1625 days
discovery → filing · 17 days

Jun 1, 2015

Begins

Nov 12, 2019

Discovered

Nov 29, 2019

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filings ↓up to 4d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Oregon State AGNov 29 · first
Massachusetts State AGNov 29 · first
California State AGNov 29 · first
Montana State AGNov 29 · first
Washington State AGNov 29 · first · this page
New Hampshire State AG+3d
South Carolina State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.