Forest Global Training Partners

Cyber Risks · Krebs on Security

Holiday Inn Parent IHG Probes Breach Claims

Summary: InterContinental Hotels Group, parent of more than 5,000 hotels worldwide including Holiday Inn, said it is investigating claims of a possible credit card breach at some U.S. locations after KrebsOnSecurity heard from fraud-prevention sources at multiple financial institutions reporting a pattern of card fraud tied to Holiday Inn and Holiday Inn Express properties. IHG said it received similar reports, hired an outside security firm, and is working with the payment card networks. The article notes that Kimpton, Trump Hotels, Hilton, Mandarin Oriental, White Lodging, Starwood and Hyatt have acknowledged card breaches, many involving malware planted on point-of-sale devices at hotel restaurants and bars.

What's compelling: This is the same point-of-sale malware pattern that hit Target, Home Depot and a string of hotel chains, and the article notes the malware usually arrives through hacked remote administration tools - so the question for a security leader is whether POS devices and the remote access into them are locked down before the next fraud-prevention call comes in.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related