Aimbridge Hospitality Holdings, LLC

The California Office of the Attorney General reported that Aimbridge Hospitality Holdings, LLC experienced a data breach involving unauthorized access to employee email accounts due to a phishing incident between June 7, 2018, and September 24, 2018. Approximately 17,381 California residents were affected, and the compromised information included names, Social Security numbers, financial account numbers, and/or Driver’s License numbers. On January 2, 2019, Aimbridge reported the breach and outlined steps taken to enhance security.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-143451

TPRM report: https://www.rankiteo.com/company/aimbridge-hospitality

"id": "aim834072825",
"linkid": "aimbridge-hospitality",
"type": "Breach",
"date": "6/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 17381,
                        'industry': 'Hospitality',
                        'name': 'Aimbridge Hospitality Holdings, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 17381,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers',
                                              'financial account numbers',
                                              'Driver’s License numbers']},
 'date_publicly_disclosed': '2019-01-02',
 'description': 'Aimbridge Hospitality Holdings, LLC experienced a data breach '
                'involving unauthorized access to employee email accounts due '
                'to a phishing incident between June 7, 2018, and September '
                '24, 2018. Approximately 17,381 California residents were '
                'affected, and the compromised information included names, '
                'Social Security numbers, financial account numbers, and/or '
                'Driver’s License numbers.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'financial account numbers',
                                 'Driver’s License numbers']},
 'initial_access_broker': {'entry_point': 'Phishing Email'},
 'post_incident_analysis': {'root_causes': 'Phishing Incident'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'title': 'Aimbridge Hospitality Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}