Newsroom

July 01, 2015

Krebs: Card breach at Trump hotels

KrebsOnSecurity has identified a potential card breach affecting Trump hotels in Chicago, Honolulu, Las Vegas, Los Angeles, Miami and New York.

Krebs cited U.S. bank sources, reporting that several had "traced a pattern of fraudulent debit and credit card charges to accounts that had all been used at Trump hotels." It said the breach appears to extend back to at least February.

As Kerbs noted, other hotel brands have been hit recently with card breaches, including the Mandarin Oriental and White Lodging.

Krebs speculated that "the huge number of card breaches at U.S.-based organizations over the past year represents a response by fraudsters to upcoming changes in the United States designed to make credit and debit cards more difficult and expensive to counterfeit."

Magnetic-stripe cards remain a prime target for hackers, he said, stating that thieves will be "busy milking it for all it's worth" before the U.S. shifts to EMV, chip-based cards.

NAFCU continues to call for national data security and breach notification standards for all segments of the payments system.

With Congress in recess, the association is urging members to reach out to their U.S. senators and representatives for support and cosponsorship of the "Data Security Act" – H.R. 2205, introduced by Rep. Randy Neugebauer, R-Texas, and S. 961, and Sens. Tom Carper, D-Del., and Roy Blunt, R-Mo.

The identical bills would create a strong national data security standard for retailers, hold them accountable for breaches on their end, and recognize credit unions' compliance with the Gramm-Leach-Bliley Act.