Cyber Risks · Krebs on Security

Inter Continental Hotel Chain Breach Expands

Summary: IHG acknowledged that malware designed to access payment card data ran on front desk systems at more than 1,000 of its franchised properties between September 29 and December 29, 2016, after earlier saying only a dozen properties appeared affected. Researcher Christian Sonne counted at least 1,175 US and Puerto Rico properties on IHG's state lookup tool, led by 781 Holiday Inn Express locations, and IHG said some franchise owners declined its offer of a free forensic examination.

What you should know: IHG said properties running its secure payment solution before September 29, 2016 were not affected, which means the franchisees that deferred that cost are the ones whose front desks captured customer card data for three months.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related