WYNDHAM HOTELS & RESORTS, INC.

Wyndham Hotels & Resorts filed its 10-K Item 1C disclosing no material cybersecurity incidents as of the filing date. The filing details a robust cybersecurity program including threat intelligence, a hybrid SOC, and an Information Risk Committee. It confirms no known material risks affecting financial condition, though it notes prior incidents occurred before a Spin-Off.

Wyndham Hotels and Resorts, LLC submitted a supplemental notice to the New Hampshire Attorney General regarding a data security incident affecting approximately 201 New Hampshire residents. The breach involved the unauthorized access of credit card numbers and transactional data from March 29 to May 10, 2009, via a sophisticated hacker. Wyndham retained forensic investigators, notified law enforcement and payment networks, and provided one year of credit monitoring services to affected individuals.

Wyndham Hotels and Resorts notified New Hampshire AG in December 2008 regarding unauthorized access to systems at certain branded hotels. Compromised data included credit/debit card numbers, expiration dates, and names. Wyndham terminated access, notified law enforcement and payment networks, and offered one year of free credit monitoring.

Wyndham Hotels and Resorts, LLC reported a data breach to the Hawaii Office of Consumer Protection. The office was notified on 2008/10.14. Breach type: Hackers/Unauthorized Access. 1,000 Hawaii residents were affected. Recovered from the Internet Archive after the notice was removed from the OCP table.