Share

Trump hotels settle with NY attorney general over data loss

Trump Hotel Collection is headed by Donald Trump and his three children, according to Bloomberg.

Advertisement

According to the state attorney’s office, banks analyzing records for hundreds of fraudulent credit card transactions a year ago found that the Trump hotel chain was the last legitimate transaction, suggesting the Trump hotels were the victim of a cyberattack.

The first breach was confirmed in June 2015, however as alleged by the attorney general’s office, the chain did not provide notice to its customers until close to four months later, violating New York’s general business law that requires customers be notified, “in the most expedient time possible and without unreasonable delay”. The attacker deployed malware created to steal credit card information across the hotel chain’s network, according to the A.G.

They say a hacker infiltrated the hotel group’s payment processing system in May 2014.

The Trump International Hotel & Tower in New York City was one of several properties breached by a cyber attack that stole credit card data.

The attacker planted malware in the system created to steal credit card information across Trump hotel’s computer network.

NY law requires consumers be notified “in the most expedient time possible and without unreasonable delay”, Schneiderman’s office said. Trump National Doral in Miami was also affected by a breach, according to the AG.

A spokesperson for Trump Hotels said in a prepared statement, “Unfortunately, cyber criminals seeking consumer data have recently infiltrated the systems of many organizations, including nearly every major hotel company”. The attacker installed credit card harvesting malware on 39 systems affecting five hotel properties including Trump SoHo New York located at 246 Spring Street, New York, NY 10013.

The breaches resulted in more than 70,000 credit card numbers and other personal information being exposed, according to officials. The company, however, waited almost four months to inform consumers of the breach by placing a notice on its website. However, it was not until April 4, 2016 that THC adopted this solution.

After the first breach, the investigation recommended that the hotel chain adopt additional security precautions including “two-factor authentication”.

As for the forensic investigators’ recommendations, Martini said even those steps might not have been enough to protect the hotel customers’ data.

Advertisement

“Donald Trump is the only candidate who will ensure American interests are effectively protected, unlike Hillary Clinton who has proven herself to be utterly incompetent as evidenced by her illegal use of an unsecured email server that was completely vulnerable to hacking”.

Trump Soho