Cyber Risks · Krebs on Security

Banks: Card Thieves Hit White Lodging Again

Summary: Banking sources told KrebsOnSecurity that counterfeit card fraud traced back to cards used at Marriott properties run by White Lodging, with legitimate transactions dating from mid-September 2014 to January 2015 and compromises again appearing tied to hacked cash registers at food and beverage outlets. White Lodging said it engaged a full forensic audit and has found no identifiable infection, while Marriott spokesman Jeff Flaherty said the affected properties are operated by White Lodging and that Marriott is nearing completion of tokenizing its U.S. managed systems.

What's compelling: This is the second reported card-fraud pattern at White Lodging locations in a year, after the company confirmed in 2014 that malware on cash registers at 14 locations had been stealing card data for roughly nine months. Tokenization, which White Lodging says its front desk systems already use and its other payment terminals will adopt by the end of the second quarter, does not stop malware that captures card data on the point-of-sale device before it can be tokenized.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related