It is believed an Indian hacker succeeded in bypassing the security software and placing a Trojan virus on one of the firm's machines used for reservations.
The next time a staff member logged in, his or her username and password were collected, stored then put up for sale on a website operated by a branch of the Russian mafia.
The stolen data includes a range of private information such as home addresses, telephone numbers, credit card details and place of employment.
Best Western fixed the security breach on Friday after being alerted by a Sunday newspaper, which had discovered the crime.
Best Western is "investigating further" and has temporarily handed control of their systems to its American team.
If you visited an affected hotel, you may want to immediately freeze your credit report and call your bank for replacement cards.
Hackers steal details of millions of Best Western hotel guests [The Telegraph]
Indian behind major cyber-crime in UK [Press Trust of India]
(Photo: Getty)
Good job of damage control. It did remind me that I should purge CC data that I had residing on several air travel, hotel, etc., sites.
]]>There's no 90 day about it. Those are fraud alerts and they are worthless. And it's not as easy to call them as people say. Check for the contact information on this site:
]]>Nosir. The Russian mob are the same guys skimming credit cards from sketchy ATMs worldwide.
Though I find it hilarious that the mob is outsourcing to India. Probably a Dell CSR making a little cash on the side...
]]>If you can, be sure to get a copy of your report BEFORE you freeze, because the bureaus may not give you one after the account is frozen without a hassle (although they are required to by law). I recommend doing the freeze by telephone.
Finally, be sure to obtain a code from the bureau when you make the freeze, because you may need this information in order to access your report, or to let somebody else access your report.
Back to your issue. It really ticks me off the way the bureaus make it so difficult to access the free info they're required to give you by law. I've never dealt with so many click-throughs for for-fee services. They're hoping you'll get tired or anxious and cough up some dough.
]]>Seriously?!?!
]]>I thought businesses were warned by CC companies (Visa, MC) not to store card holder info after the transaction was completed.
Or does this come from regular customers storing their CC number on business websites to 'expedite making reservations'? Hmmm, maybe it's time to make sure I haven't left CC info on any hotel, air, online purchase, etc., websites.
]]>/I thought I was done getting screwed by them...I guess not...
]]>For some reason I'm picturing some Parade-type publication. And how in the world was it that a newspaper discovered this and only let Best Western know via a published story, and not the authorities?
]]>Their value is much, much better.
]]>at least store info on customers from the last 3 months..... 1.5 years? another TJMaxx?
]]>Question is: will Best Western make any attempt to notify possible victims and assist them in keeping their identity from being used by these mobsters??? Maybe they'll "take it seriously".
]]>This sounds like something out of a really bad James Bond movie.
]]>How? I went to Equifax and all they have is these pay-by-the-month plans. I don't want to pay $179 a year to freeze/thaw my reports. Do I have to submit this via writing like they say here? Grr.
]]>