Share

Hilton hotels hit by cyber attack

San Francisco - US hotel chain Hilton revealed Tuesday that hackers infected some of its point-of-sale computer systems with malware crafted to steal credit card information.

Hilton would not disclose whether data was taken, but advised anyone who used payment cards at Hilton Worldwide hotels between November 18 and December 5 of last year or April 21 and July 27 of this year to watch for irregular activity on credit or debit card accounts.

Malicious code that infected registers at hotels had the potential to take cardholders' names along with card numbers, security codes and expiration dates, Hilton said in an online post.

Hilton said that it is investigating the breach with the help of third-party forensics experts, law enforcement and payment card companies.

Starwood struck

The announcement came just four days after Starwood Hotels, which operates the Sheraton and Westin chains, said that hackers had infected payment systems in some of its establishments, potentially leaking customer credit card data.

The hack occurred at a "limited number" of its hotels in North America, according to Starwood, whose other well-known chains include St Regis and W Hotels.

Starwood said that an investigation by forensic experts concluded that malware was detected in some restaurants, gift shops and other points of sale systems at hotels.

"The malware was designed to collect certain payment card information, including cardholder name, payment card number, security code and expiration date," the group said in a statement.

Trump targeted

The cyber attacks on Hilton and Starwood sounded similar to one disclosed last month by Trump Hotel Collection.

"We believe that there may have been unauthorised malware access to some of the computers that host our front desk terminals and payment card terminals in our restaurants, gift shops and other point-of-sale purchase locations at some hotels," Trump Hotel Collection said at a website devoted to details of the incident.

The access may have taken place between May 19 of last year and June 2 of this year, according to Trump hotels.

Locations affected were listed as Trump SoHo New York, Trump National Doral, Trump International New York, Trump International Chicago, Trump International Waikiki, Trump International Hotel & Tower Las Vegas, and Trump International Toronto.

An independent forensic investigation did not turn up evidence that customer information was removed, but not was provide by Trump hotels in "an abundance of caution," according to the website.

Data targeted by the malware appeared to include account numbers, card expiration dates, and security codes.

Cyber threats blogger Brian Krebs at KrebsonSecurity.com described the infiltration of Trump payment systems as "just the latest in a long string of credit card breaches involving hotel brands, restaurants and retail establishments."

Krebs placed fault on slow adoption in the US of encrypted chip technology on payment cards that provide more protection for data than does magnetic strips.

We live in a world where facts and fiction get blurred
Who we choose to trust can have a profound impact on our lives. Join thousands of devoted South Africans who look to News24 to bring them news they can trust every day. As we celebrate 25 years, become a News24 subscriber as we strive to keep you informed, inspired and empowered.
Join News24 today
heading
description
username
Show Comments ()
Rand - Dollar
18.90
+0.2%
Rand - Pound
23.85
+0.2%
Rand - Euro
20.39
+0.2%
Rand - Aus dollar
12.31
+0.2%
Rand - Yen
0.12
+0.2%
Platinum
908.05
0.0%
Palladium
1,014.94
0.0%
Gold
2,232.75
-0.0%
Silver
24.95
-0.1%
Brent Crude
87.00
+1.8%
Top 40
68,346
0.0%
All Share
74,536
0.0%
Resource 10
57,251
0.0%
Industrial 25
103,936
0.0%
Financial 15
16,502
0.0%
All JSE data delayed by at least 15 minutes Iress logo
Company Snapshot
Editorial feedback and complaints

Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.

LEARN MORE
Government tenders

Find public sector tender opportunities in South Africa here.

Government tenders
This portal provides access to information on all tenders made by all public sector organisations in all spheres of government.
Browse tenders