Hyatt Regency Sydney

The theft of personal information from guests at a Sydney hotel criminal was operating their system.

Numerous visitor registration documents, which include photocopies of passports, licences, and other forms of identity, were stolen from the hotel.

The police investigated the incident and seized bags of documents before hundreds of innocent hotel guests could fall victim to global organised crime.

Source: https://www.9news.com.au/national/upmarket-sydney-hotel-targeted-by-cybercriminals/7c23376f-09ec-4a0b-af2f-3722b67741c8

TPRM report: https://scoringcyber.rankiteo.com/company/hyatt-regency-sydney

"id": "hya1622822",
"linkid": "hyatt-regency-sydney",
"type": "Breach",
"date": "04/2017",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 'Hundreds of hotel guests',
                        'industry': 'Hotel',
                        'location': 'Sydney',
                        'name': 'Sydney Hotel',
                        'type': 'Hospitality'}],
 'attack_vector': 'Physical Theft',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Visitor registration documents',
                                              'Photocopies of passports',
                                              'Licenses',
                                              'Other forms of identity']},
 'description': 'The theft of personal information from guests at a Sydney '
                'hotel where a criminal was operating their system. Numerous '
                'visitor registration documents, which include photocopies of '
                'passports, licenses, and other forms of identity, were stolen '
                'from the hotel. The police investigated the incident and '
                'seized bags of documents before hundreds of innocent hotel '
                'guests could fall victim to global organized crime.',
 'impact': {'data_compromised': ['Visitor registration documents',
                                 'Photocopies of passports',
                                 'Licenses',
                                 'Other forms of identity'],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Physical Access',
                           'high_value_targets': 'Visitor registration '
                                                 'documents'},
 'investigation_status': 'Ongoing',
 'motivation': 'Theft of Personal Information',
 'post_incident_analysis': {'root_causes': 'Inadequate physical security'},
 'response': {'containment_measures': 'Seized bags of documents',
              'law_enforcement_notified': True},
 'threat_actor': 'Unknown Criminal',
 'title': 'Data Theft from Sydney Hotel',
 'type': 'Data Theft',
 'vulnerability_exploited': 'Physical Security'}