Resort Data Processing, Inc.

The Washington State Office of the Attorney General reported a data breach involving Resort Data Processing, Inc. on October 27, 2023. The breach, discovered on August 21, 2023, involved a SQL injection vulnerability affecting the personal information of 2,319 Washington residents, including names, mailing addresses, email addresses, and credit card information. The breach occurred from August 2022 to August 23, 2023.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=15860

TPRM report: https://www.rankiteo.com/company/resort-data-processing-inc.

"id": "res109072725",
"linkid": "resort-data-processing-inc.",
"type": "Vulnerability",
"date": "8/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 2319,
                        'name': 'Resort Data Processing, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'SQL Injection',
 'data_breach': {'number_of_records_exposed': 2319,
                 'personally_identifiable_information': ['names',
                                                         'mailing addresses',
                                                         'email addresses'],
                 'type_of_data_compromised': ['names',
                                              'mailing addresses',
                                              'email addresses',
                                              'credit card information']},
 'date_detected': '2023-08-21',
 'date_publicly_disclosed': '2023-10-27',
 'description': 'A data breach involving Resort Data Processing, Inc. was '
                'reported by the Washington State Office of the Attorney '
                'General on October 27, 2023. The breach, discovered on August '
                '21, 2023, involved a SQL injection vulnerability affecting '
                'the personal information of 2,319 Washington residents, '
                'including names, mailing addresses, email addresses, and '
                'credit card information. The breach occurred from August 2022 '
                'to August 23, 2023.',
 'impact': {'data_compromised': ['names',
                                 'mailing addresses',
                                 'email addresses',
                                 'credit card information']},
 'references': [{'date_accessed': '2023-10-27',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Data Breach at Resort Data Processing, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'SQL Injection'}