Cyber Risks · Krebs on Security

Hyatt Hotels Suffers 2nd Card Breach in 2 Years

Summary: Hyatt Corp. alerted customers to a second credit card breach in two years, with its security team finding signs of unauthorized access to card data from cards manually entered or swiped at front desks of certain Hyatt-managed locations between March 18 and July 2, 2017. The incident affected 41 properties in 11 countries, including five U.S. locations and 18 in China, compared with the roughly four-month 2015 breach that hit 250 properties in 50 countries.

Key Takeaway: The exposed data included cardholder name, card number, expiration date and internal verification code, and Krebs notes that organized crime groups such as the Carbanak gang have targeted hospitality customer service and reservations staff with tailored social engineering using well-aged fake companies and custom malware.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related