Orland FL (hospitalitybusinessnews.com) In March 2016, hospitalitybusinessnews.com reported that Rosen Hotels and Resorts had disclosed a possible data breach at it’s hotels.
In connection with this data breach, on March 27 2017, St Paul Fire and Marine Insurance company filed suit against a Rosen subsidiary, Rosen Millenium Inc.. In its’ suit St. Paul Fire & Marine is seeking a judge’s order declaring that Rosen’s policy doesn’t require St. Paul to cover the costs of the data breach.
According to court documents there were three windows of the breach; September 2, 2014 – September 15, 2015; September 25, 2015 to February 10, 2016; and February 11, 2016 to February 18, 2016.
As a result of the breach Rosen notified the group of allegedly affected customers, in March 2016, that a data breach may have occurred.
As a follow up to this, and the findings of the investigation, and in accordance with their respective card service agreements, Visa, Mastercard, and American Express imposed substantial fines on Rosen.
According to court documents the amounts of the fines were:
- MasterCard $1.005,139.72
- American Express $128,830.00
- Visa “over $1 miilion”
In December 2016, Rosen notified it’s insurance company of the breach where it estimated an economic loss pf more than $2.4M.