Irvine ,
09:05 PM


(Irvine, Calif.) (July 20, 2017) – Pacific Hospitality Group (PHG) was recently notified about a data breach at Sabre Hospitality Solutions (Sabre), the hotel reservations service provider for PHG’s Meritage Collection portfolio of six properties. The incident allowed an unauthorized party to gain access to certain guest information for a subset of reservations processed through Sabre’s SynXis Central Reservation System (CRS) between November 3, 2016 to March 9, 2017. Unauthorized access has been revoked.

What Happened?

Sabre’s CRS facilitates the booking of hotel reservations made by consumers through hotels, online travel agencies, and similar booking services. Following an examination of forensic evidence, Sabre alerted PHG that an unauthorized party gained access to account credentials that permitted unauthorized access to view unencrypted payment card information, as well as certain reservation information, for a subset of hotel reservations processed through Sabre’s system. Following some investigation, Sabre sent PHG the names and contact information of potentially impacted guests.

Sabre’s investigation determined that the unauthorized party first obtained access to payment card and other reservation information at the Meritage Collection properties on November 3, 2016. The last access to payment card information was on March 9, 2017. According to Sabre, its investigation did not uncover forensic evidence that the unauthorized party actually removed any information from Sabre’s system, but it remains a possibility.

What Information was Involved?

The unauthorized party could access payment card information for certain hotel reservation(s), including cardholder name; card number; card expiration date; and, potentially, the card security code. In some cases, other information included the guest’s name, email, phone number and address. Social security numbers, passport information and driver’s license numbers were not compromised.

What Are We Doing?

PHG is notifying potentially affected guests to allow them to closely monitor for fraudulent charges or other indicia of identity theft. Per Sabre, the unauthorized access was shut off and there is no evidence of continued unauthorized activity. Sabre also informed us that it engaged a leading independent cybersecurity firm to support the investigation and notified law enforcement and the payment card brands about this incident. There is no evidence of continued unauthorized activity.

PHG also set up a consumer information site regarding the breach, which is available at:

What Impacted Guests Can Do?

Affected individuals should remain vigilant for incidents of fraud and identity theft by regularly reviewing account statements and monitoring free credit reports for any unauthorized activity. If there is any suspicious or unusual activity on accounts, affected individuals should report it immediately to their financial institutions, as major credit card companies have rules that restrict them from requiring payment for fraudulent charges that are timely reported. Affected consumers may also report the unauthorized activity to their local authorities for fraud and identity theft.

For More Information

Pacific Hospitality Group takes the security and protection of its guest’s information seriously. PHG continues to work closely with Sabre to ensure affected guests with available email or mailing addresses receive notification about the potential compromise. Below please find a list of the affected Meritage Collection properties along with the dates of exposure:

Meritage Collection Properties Affected by

the Sabre Hospitality Solutions Incident

Impacted Property

Dates of Exposure

Bacara Resort & Spa

11/10/16 – 3/3/17

Balboa Bay Resort

11/6/16 – 3/3/17

Estancia La Jolla Hotel & Spa

11/7/16 – 3/2/17

Ko’a Kea Hotel & Resort

11/8/16 – 3/8/17

The Meritage Resort and Spa

11/3/16 – 3/2/17

Paséa Hotel & Spa

11/7/16 – 3/9/17

If you made a reservation at one of our properties during the dates listed above, please carefully review the following information:

Meritage Collection Customer Notification Letter

For additional information or further assistance, please call the dedicated toll-free response line at 800-442-8960 (U.S. and Canada) and 503-520-4461 (international) or visit


About Meritage Collection

The Meritage Collection is a portfolio of lifestyle and luxury hotels that blends iconic, one-of-a-kind places with locally-inspired experiences. Débuted in 2013, the Meritage Collection is comprised of seven hotels and resorts throughout California and Hawaii, representing more than 1400 rooms and nearly 149,000 square feet of premier indoor meeting and event space. It includes The Meritage Resort and Spa in Napa Valley, Estate at The Meritage Resort (Opening in 2018) in Napa Valley, Bacara Resort & Spa in Santa Barbara, Paséa Hotel & Spa in Huntington Beach, Balboa Bay Resort in Newport Beach, Ko’a Kea Hotel & Resort in Kauai and Estancia La Jolla Hotel & Spa. Reflective of its California roots, the Meritage Collection offers a laid-back luxury service culture that caters to the modern day traveler. The Meritage Collection properties are members of the Global Hotel Alliance and its DISCOVERY Rewards Program. DISCOVERY rewards travelers with local experiences and unique adventures not generally available to the public. For more information, please visit, or

About Pacific Hospitality Group

Established in 1987, Pacific Hospitality Group (PHG) is a growing hospitality company

with 12 hotels, resorts and club assets across the United States. Based in Irvine,

California, the company finances, manages and owns a portfolio of lifestyle and luxury properties known as the Meritage Collection. Bacara Resort & Spa in Santa Barbara, Balboa Bay Resort in Newport Beach, Estancia La Jolla Hotel & Spa, The Meritage Resort and Spa in Napa Valley, Ko’a Kea Hotel & Resort in Kauai and the recently opened Paséa Hotel & Spa in Huntington Beach comprise the Collection. PHG also serves as the owner-franchisee for the following properties: Wyndham Anaheim Garden Grove, AC Hotel Phoenix Tempe/Downtown, AC Hotel Irvine, AC Hotel New Orleans Bourbon/French Quarter Area, DoubleTree by Hilton Irvine Spectrum, and DoubleTree by Hilton Santa Ana/Orange County Airport. The company attributes its success to maximizing the net operating income of its properties through consistent revenue growth and effective cost management. Other PHG affiliated assets include Trinitas Cellars, Balboa Bay Club and Newport Beach Country Club. For more information, visit or