Mount Hood Meadows Oregon, LLC

The Washington State Office of the Attorney General reported a data breach at Mt. Hood Meadows, Oregon, LLC on November 1, 2023. The breach occurred from February 21, 2023, to March 14, 2023, potentially affecting the personal information of 2,482 individuals, including their names and credit card payment information. The breach was identified on March 9, 2023, and involved unauthorized access via code modification on the web server.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=15901

TPRM report: https://www.rankiteo.com/company/mt-hood-meadows-ski-resort

"id": "mt-233072825",
"linkid": "mt-hood-meadows-ski-resort",
"type": "Breach",
"date": "2/2023",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 2482,
                        'industry': 'Recreation',
                        'location': 'Oregon, USA',
                        'name': 'Mt. Hood Meadows, Oregon, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized access via code modification on the web server',
 'data_breach': {'number_of_records_exposed': 2482,
                 'personally_identifiable_information': ['Names',
                                                         'Credit card payment '
                                                         'information'],
                 'type_of_data_compromised': ['Names',
                                              'Credit card payment '
                                              'information']},
 'date_detected': '2023-03-09',
 'date_publicly_disclosed': '2023-11-01',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach at Mt. Hood Meadows, Oregon, LLC on November 1, '
                '2023. The breach occurred from February 21, 2023, to March '
                '14, 2023, potentially affecting the personal information of '
                '2,482 individuals, including their names and credit card '
                'payment information. The breach was identified on March 9, '
                '2023, and involved unauthorized access via code modification '
                'on the web server.',
 'impact': {'data_compromised': ['Names', 'Credit card payment information'],
            'systems_affected': ['Web server']},
 'initial_access_broker': {'entry_point': 'Web server'},
 'references': [{'date_accessed': '2023-11-01',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Data Breach at Mt. Hood Meadows, Oregon, LLC',
 'type': 'Data Breach'}