BankThink

Hotel payment vulnerability has a feeling of déjà vu

The recent data breach announcement by the Radisson Hotel Group is a broken record of bad events in the security-challenged travel industry.

Radisson includes over 1,400 hotels across the world and many brands, such as Country Inn & Suites, Park Inn and, of course, the Radisson Collection.

Radisson Rewards members were informed that a breach this month may have resulted in the potential disclosure of their personal information to include names, physical addresses, countries of residence, email addresses, some business names, telephone numbers, frequent-flier numbers and Radisson Rewards member numbers. The European GDPR is now in effect, so the potential fines and other regulatory impacts of this data breach, if any, are still unknown.

Chart: Fraudsters target issuers, hotels

Unfortunately, this is just the most recent cyberattack in the hotel industry.

2017 was a banner year for hotel cyberattacks, with the InterContinental Hotels Group, Sabre Hospitality Solutions (including Hard Rock Hotels, Four Seasons Hotels, Trump Hotels and Loews Hotels), Hyatt Hotels, Galt House Hotel and Hilton also reporting potential data breaches and/or cyberattacks.

In 2016 the Hard Rock Hotel and Casino in Las Vegas also suffered a data breach to the card payment system. Earlier that year the Trump Hotel Collection appeared to be breached by hackers that penetrated its credit card systems.

Other well-known hotels breached in 2016 included the Rosen Hotels and Resorts, the Hotton Hotel, Noble House Hotels and Resorts, Millennium Hotels and Resorts, Kimpton Hotels and Restaurants and the Dallas-based Omni Hotels and Resorts.

For reprint and licensing requests for this article, click here.
Data breaches Cyber security Payment processing ISO and agent
MORE FROM AMERICAN BANKER