Forest Global Training Partners

Cyber Risks · Krebs on Security

Hilton Acknowledges Credit Card Breach

Summary: Hilton acknowledged that malicious software on some point-of-sale systems captured payment card data over a 17-week period, either Nov. 18 to Dec. 5, 2014 or April 21 to July 27, 2015, two months after KrebsOnSecurity first reported that banks suspected a breach at its properties. The company said the stolen data included cardholder names, card numbers, security codes and expiration dates, but did not say how many locations or brands were affected, and the disclosure came five days after a similar breach at Starwood properties including some 50 Sheraton and Westin locations.

Key Takeaway: Hilton's statement left out the count of affected locations and brands, so the scope of exposure for a 17-week window is still unknown to the cardholders and issuers who have to act on it. The same malware-driven pattern hit Starwood, Trump Hotel Collection, Mandarin Oriental and White Lodging within the year, which means the exposure is a sector-wide condition rather than a single incident.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related