Holiday Valley Resort

People who have used their cards on several sale points in Holiday Valley Resort suffered a data security breach.

Malicious software was installed by the hackers on a number of points of sale, which resulted in the breach.

Although the malware was removed and steps were taken to prevent it, the breach affected a number of its guest.

The resort notified the customers about the breach and offered free credit monitoring to the affected customers.

Source: https://buffalonews.com/business/local/holiday-valley-resort-reports-data-security-breach/article_371f3d83-b113-54ef-861c-228d36f4384d.html

TPRM report: https://www.rankiteo.com/company/holiday-valley-resort

"id": "hol2091522",
"linkid": "holiday-valley-resort",
"type": "Ransomware",
"date": "6/2017",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Yes',
                        'industry': 'Hospitality',
                        'name': 'Holiday Valley Resort',
                        'type': 'Organization'}],
 'attack_vector': 'Malware',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Payment Card Information'},
 'description': 'People who have used their cards on several sale points in '
                'Holiday Valley Resort suffered a data security breach. '
                'Malicious software was installed by the hackers on a number '
                'of points of sale, which resulted in the breach. Although the '
                'malware was removed and steps were taken to prevent it, the '
                'breach affected a number of its guests. The resort notified '
                'the customers about the breach and offered free credit '
                'monitoring to the affected customers.',
 'impact': {'data_compromised': ['Card Information'],
            'payment_information_risk': 'High',
            'systems_affected': ['Points of Sale']},
 'initial_access_broker': {'entry_point': 'Points of Sale'},
 'motivation': 'Data Theft',
 'response': {'communication_strategy': ['Customer Notification',
                                         'Free Credit Monitoring'],
              'containment_measures': ['Malware Removal'],
              'remediation_measures': ['Preventive Steps']},
 'threat_actor': 'Hackers',
 'title': 'Data Security Breach at Holiday Valley Resort',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Points of Sale'}