PHP Vulnerability Responses by Company

Drury Hotels Company, LLC

Companies / web services
Aliases / services
Drury Hotels / ドゥルーリー・ホテルズ / Drury Hotels Company, LLC
Official website
https://www.druryhotels.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Drury Hotels reservations through third-party booking sites

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

After additional findings received September 23, 2019, the affected period expanded to December 28, 2017–June 2, 2019. Vendor-routed booking records included card data; direct website, telephone and app reservations were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review card statements and promptly report unauthorized charges to the issuer. Check the official notice for whether your reservation was in scope.

Official service URL

Source URLs

  1. Official operator evidencehttps://www.druryhotels.com/home/privacypolicyService and operation documentation
  2. Official incident noticehttps://oag.ca.gov/system/files/Notice_-_CA.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Drury Hotels Company, LLC and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments