DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Noble House Hotels and Resorts notifies customers at six luxury hotels of payment card breach

Posted on November 15, 2015 by Dissent

Luxury hotel chain Nobel House Hotels and Resorts is notifying customers of a breach they uncovered in the wake of reports by customers of fraudulent charges on payment cards.

In a letter sent to those potentially affected, Patrick R. Colee, Chairman of Noble House Hotels & Resorts, writes, in part:

Through our investigation, Noble House learned that malware may have been installed on payment processing systems that potentially affected cards swiped at the following properties:

  • The Portofino Hotel and Marina, Redondo Beach, CA, from April 3, 2015 to August 11, 2015;
  • The Edgewater, Seattle, WA, from December 29, 2014 to August 11, 2015;
  • Little Palm Island Resort and Spa, Florida Keys, FL, from December 29, 2014 to May 22, 2015;
  • Mountain Lodge Telluride, Telluride, CO, from December 29, 2014 to May 27, 2015;
  • Ocean Key Resort and Spa, Key West, FL, from December 29, 2014 to August 6, 2015
  • River Terrace Inn, Napa, CA, from December 29, 2014 to August 11, 2015.

The information potentially compromised by the malware involves data found in the magnetic stripe on payment cards, which includes the cardholder name, card number, expiration date, and CVV number.

It’s not clear from their notification whether there was (just) one malware incident that began in December, 2014, or if there was also a second incident in April, 2015.  The metadata submitted with the copy of the notification indicates that they discovered the breach on October 15, 2015.

In response to the discovery, Noble House notified the FBI and also encouraged customers to remain vigilant and report any suspicious charges to their financial institutions. They also offered to reimburse any unreimbursed charges:

If you incurred costs that your financial institution declined to reimburse related to fraudulent charges on a payment card you used at one of the above properties, please contact us at the number below. We will reimburse you for any such reasonable, documented costs that your financial institution declined to pay.
Although Noble House reports only a few known/reported cases of card fraud as of the time of their notification, that number may rise one people realize that it may be the source of any fraudulent charges they may have experienced.
A copy of the notification has also been posted to Nobel House’s web site, linked from their home page.

Related posts:

  • Noble House Hotels & Resorts notifies guests of payment card breaches at Teton Mountain Lodge & Spa and Hotel Terra
  • Noble House Hotels & Resorts updates breach disclosure as more properties identified as affected
  • Noble House Identifies, Discloses Payment Card Security Incident
  • Noble House Hotels & Resorts responds to data breach
Category: Business SectorMalwareU.S.

Post navigation

← In: Class 12 student finds Gauhati University website highly insecure, says can be hacked through phone
Fashion to Figure notifying customers of payment card compromise →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Texas Centers for Infectious Disease Associates Notifies Individuals of Data Breach in 2024
  • Battlefords Union Hospitals notifies patients of employee snooping in their records
  • Alert: Scattered Spider has added North American airline and transportation organizations to their target list
  • Northern Light Health patients affected by security incident at Compumedics; 10 healthcare entities affected
  • Privacy commissioner reviewing reported Ontario Health atHome data breach
  • CMS warns Medicare providers of fraud scheme
  • Ex-student charged with wave of cyber attacks on Sydney uni
  • Detaining Hackers Before the Crime? Tamil Nadu’s Supreme Court Approves Preventive Custody for Cyber Offenders
  • Potential Cyberattack Scrambles Columbia University Computer Systems
  • 222,000 customer records allegedly from Manhattan Parking Group leaked

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Germany Wants Apple, Google to Remove DeepSeek From Their App Stores
  • Supreme Court upholds Texas law requiring age verification on porn sites
  • Justices nix Medicaid ‘right’ to choose doctor, defunding Planned Parenthood in South Carolina
  • European Commission publishes its plan to enable more effective law enforcement access to data
  • Sacred Secrets: The Biblical Case for Privacy and Data Protection
  • Microsoft’s Departing Privacy Chief Calls for Regulator Outreach
  • Nestle USA Settles Suit Over Job-Application Medical Questions

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.