P2018-ND-101

On or about June 6, 2017, the Organization was notified by its service provider, Sabre Hospitality Solutions (Sabre), that an unauthorized party gained access to certain Sabre account credentials. This permitted unauthorized access to unencrypted payment card information and select reservation information for certain reservations processed and stored on Sabre’s central reservations system (CRS). Sabre facilitates the booking of hotel reservations by guests, including for some hotels that are owned, licensed, or managed by the Organization. Sabre advised the Organization that some of the persons impacted by the unauthorized CRS access were persons who made reservations at the Organization’s hotels. The period of unauthorized access was from August 10, 2016 to March 9, 2017.