Six Continents Hotels, Inc.

The California Office of the Attorney General reported a data breach involving InterContinental Hotels Group on April 14, 2017. The breach occurred between September 29, 2016, and December 29, 2016, due to malware accessing payment card data at certain franchise locations in the Americas. The number of affected individuals is currently unknown, and specific types of information compromised might include cardholder names, card numbers, expiration dates, and security codes.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-67635

TPRM report: https://scoringcyber.rankiteo.com/company/ihghotels&resorts

"id": "ihg1056072825",
"linkid": "ihghotels&resorts",
"type": "Cyber Attack",
"date": "9/2016",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Hotel',
                        'location': 'Americas',
                        'name': 'Six Continents Hotels, Inc. (d/b/a '
                                'InterContinental Hotels Group)',
                        'type': 'Hospitality'}],
 'attack_vector': 'Malware',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['cardholder names',
                                              'card numbers',
                                              'expiration dates',
                                              'security codes']},
 'date_detected': '2017-04-14',
 'date_publicly_disclosed': '2017-04-14',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Six Continents Hotels, Inc. (d/b/a '
                'InterContinental Hotels Group) on April 14, 2017. The breach '
                'occurred between September 29, 2016, and December 29, 2016, '
                'due to malware accessing payment card data at certain '
                'franchise locations in the Americas. The number of affected '
                'individuals is currently unknown, and specific types of '
                'information compromised might include cardholder names, card '
                'numbers, expiration dates, and security codes.',
 'impact': {'data_compromised': ['cardholder names',
                                 'card numbers',
                                 'expiration dates',
                                 'security codes'],
            'payment_information_risk': True},
 'references': [{'date_accessed': '2017-04-14',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at Six Continents Hotels, Inc.',
 'type': 'Data Breach'}