Aimbridge Hospitality Holdings, LLC

Aimbridge Hospitality Holdings, LLC notified the NH AG of a phishing incident resulting in unauthorized access to employee email accounts between June 7 and September 24, 2018. Discovered September 14, 2018. 135 NH residents affected. Data included names, SSNs, financial account numbers, and driver's license numbers. Remediation included password resets, MFA implementation, and credit monitoring.

Aimbridge Hospitality Holdings, LLC experienced a phishing incident resulting in unauthorized access to employee email accounts between June 7, 2018, and September 24, 2018. The company discovered unusual activity on September 14, 2018. Personal information potentially accessed included names, Social Security numbers, financial account numbers, and driver's license numbers. Approximately 17,381 California residents were affected. The company reset passwords, implemented MFA, and offered credit monitoring.

Aimbridge Hospitality Holdings LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-12-31. 938 Massachusetts residents were affected. The report records the breach type as electronic.

Aimbridge Hospitality Holdings, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2018-12-31. The breach occurred during 6/7/2018 - 9/24/2018. The breach was discovered on 9/14/2018. 120,573 individuals were affected. Notice was sent on 12/31/2018.

Aimbridge Hospitality Holdings, LLC notified individuals of a phishing incident resulting in unauthorized access to employee email accounts between June 7 and September 24, 2018. The company discovered the incident on September 14, 2018. Affected data included names and other personal information. The company engaged forensic experts, reset passwords, and provided credit monitoring services.

Aimbridge Hospitality Holdings LLC reported a phishing incident affecting 647 Washington residents. Unauthorized access to employee email accounts occurred between June 7 and September 24, 2018. The company discovered the incident on September 14, 2018, and notified the Washington Attorney General on December 31, 2018. Affected data included names, SSNs, driver's license numbers, and financial account numbers. The company reset passwords, implemented MFA, and provided one year of credit monitoring.

Aimbridge Hospitality Holdings, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-06-07. 599 Massachusetts residents were affected. The report records the breach type as electronic.

Aimbridge Hospitality Holdings, LLC notified the NH AG of unauthorized access to employee email accounts starting March 21, 2018. The incident affected 99 NH residents, exposing names, SSNs, and financial account info. No evidence of actual misuse was found. Credit monitoring was offered. Investigation was ongoing at time of filing.

Aimbridge Hospitality Holdings, LLC reported unauthorized access to employee email accounts. On March 21, 2018, unusual activity was identified in an employee email account. Investigation determined that certain employee email accounts were subject to unauthorized access between January 8, 2018, and March 21, 2018. Personal information including name, SSN, financial account info, and credentials for 13,478 California residents was potentially exposed. The company engaged forensic investigators, changed credentials, and offered credit monitoring.

Aimbridge Hospitality Holdings, LLC notified individuals of a data breach where employee email accounts were accessed via unauthorized credentials, likely obtained through phishing. The incident was discovered on March 21, 2018. Affected individuals were offered 12 months of credit monitoring. The breach involved personal information accessible via compromised email accounts.

Aimbridge Hospitality Holdings LLC notified customers of a data breach involving a third-party vendor, Sabre Hospitality Solutions. An unauthorized party gained access to account credentials for the Sabre SynXis Central Reservations system between August 10, 2016, and March 9, 2017. This access permitted the viewing of unencrypted payment card information (card number, expiration date, security code) and certain reservation details (name, email, phone, address) for hotel reservations at properties including The Anza Calabasas Hotel, Hard Rock Hotel San Diego, The Queen Mary, and Anaheim Portofino Inn & Suites. Sabre notified Aimbridge on June 6, 2017. No Social Security numbers or driver's license numbers were impacted.

Aimbridge Hospitality Holdings, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-08-24. 123 Massachusetts residents were affected. The report records the breach type as electronic.

Sabre Hospitality Solutions experienced unauthorized access to its SynXis Central Reservations system between August 10, 2016, and March 9, 2017. An unauthorized party gained access to account credentials, compromising unencrypted payment card information and guest details for a subset of reservations at four managed hotels. Aimbridge Hospitality Holdings notified the NH AG on August 24, 2017, identifying 24 affected New Hampshire residents.