Sabre Hospitality Solutions

The California Office of the Attorney General reported a data breach involving Sabre Hospitality Solutions affecting Four Seasons Hotels and Resorts, with the breaches occurring on August 10, 2016 and March 9, 2017. Unauthorized access to unencrypted payment card information, including cardholder name, payment card number, expiration date, and in some cases, card security code, was confirmed, although no evidence indicated that information was removed from the system. Precautionary measures are being taken by Sabre, which has engaged cybersecurity experts and notified law enforcement.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-100118

TPRM report: https://www.rankiteo.com/company/hospitality-solution

"id": "hos308072625",
"linkid": "hospitality-solution",
"type": "Breach",
"date": "8/2016",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Hospitality',
                        'name': 'Four Seasons Hotels and Resorts',
                        'type': 'Hospitality'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['cardholder name',
                                              'payment card number',
                                              'expiration date',
                                              'card security code']},
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Sabre Hospitality Solutions affecting Four '
                'Seasons Hotels and Resorts, with the breaches occurring on '
                'August 10, 2016 and March 9, 2017. Unauthorized access to '
                'unencrypted payment card information, including cardholder '
                'name, payment card number, expiration date, and in some '
                'cases, card security code, was confirmed, although no '
                'evidence indicated that information was removed from the '
                'system. Precautionary measures are being taken by Sabre, '
                'which has engaged cybersecurity experts and notified law '
                'enforcement.',
 'impact': {'data_compromised': ['cardholder name',
                                 'payment card number',
                                 'expiration date',
                                 'card security code'],
            'payment_information_risk': True},
 'references': [{'source': 'California Office of the Attorney General'}],
 'response': {'law_enforcement_notified': True,
              'third_party_assistance': 'Cybersecurity experts'},
 'title': 'Data Breach at Sabre Hospitality Solutions Affecting Four Seasons '
          'Hotels and Resorts',
 'type': 'Data Breach'}