August 19th, 2009
Radisson Hotels report significant data breach
Add the Radisson Hotels & Resorts chain to the growing list of businesses reporting significant data breaches that exposed sensitive customer data.
In an open letter to guests, Radisson chief operating officer Fredrik Korallus said the hotel chain’s computer system was hacked between November 2008 and May 2009 and customer data, including credit and debit card numbers, was stolen.
From the Radisson letter:
Radisson has been coordinating with federal law enforcement to assist in the investigation of this incident. While the number of potentially affected hotels involved in this incident is limited, the data accessed may have included guest information such as the name printed on a guest’s credit card or debit card, a credit or debit card number, and/or a card expiration date.
The company did not say how many customer records were accessed.
Working with law enforcement and forensic investigators, Radisson is conducting a thorough review of the potentially affected computer systems, and has implemented additional security measures designed to prevent a recurrence of such an attack and to protect the privacy of Radisson’s valued guests. The company also is working closely with major credit card suppliers and law enforcement to ensure the incident is properly addressed.
Radisson operates about 400 franchised locations in some 65 countries.
Ryan Naraine is a journalist and security evangelist at Kaspersky Lab. He manages Threatpost.com, a security news portal. Here is Ryan's full profile and disclosure of his industry affiliations.
For daily updates on Ryan's activities, follow him on Twitter.
Subscribe to Zero Day via Email alerts or RSS.
