Preferred Hotel Group, Inc.

The California Office of the Attorney General reported a data breach involving Preferred Hotel Group, Inc. on July 14, 2017. The breach occurred on August 10, 2016, when unauthorized access to the SynXis Central Reservations system allowed viewing of unencrypted payment card information and certain reservation details for a subset of hotel reservations. This incident compromised sensitive financial information, including payment card details, which could lead to financial fraud and loss of customer trust.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-100315

TPRM report: https://www.rankiteo.com/company/preferred-hotels-&-resorts

"id": "pre644072525",
"linkid": "preferred-hotels-&-resorts",
"type": "Breach",
"date": "8/2016",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Hospitality',
                        'name': 'Preferred Hotel Group, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_encryption': 'No',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Payment Card Information',
                                              'Reservation Details']},
 'date_detected': '2017-07-14',
 'date_publicly_disclosed': '2017-07-14',
 'description': 'Unauthorized access to the SynXis Central Reservations system '
                'allowed viewing of unencrypted payment card information and '
                'certain reservation details for a subset of hotel '
                'reservations.',
 'impact': {'data_compromised': ['Payment Card Information',
                                 'Reservation Details'],
            'payment_information_risk': 'High',
            'systems_affected': ['SynXis Central Reservations System']},
 'references': [{'date_accessed': '2017-07-14',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Preferred Hotel Group Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unencrypted Payment Card Information'}