Newsroom

September 30, 2015

Trump hotel chain data breach confirmed

The Trump Hotel Collection has confirmed that its point-of-sale systems at seven hotels were attacked by malware over a 13-month period, affecting an unspecified number of consumers, according to BankInfoSecurity.

The Trump Hotel website now says, "Payment card data – including payment card account number, card expiration date, security code and cardholder name – of individuals who used a payment card at the hotel between May 19, 2014, and June 2, 2015, maybe have been affected." The breached hotels are in Chicago, Honolulu, Las Vegas, New York, Miami and Toronto.

KrebsOnSecurity reported the potential breach in July, after a pattern of fraudulent debit and credit card charges was traced to Trump hotels by banks.

Krebs last week reported a large number of Hilton Hotel and franchise properties had been hit by a point-of-sale credit card breach between April 21 and July 27, though some sources believe the breach could have begun as early as November 2014.

NAFCU continues to push for a strong national data security standard for retailers and is urging Congress to act on H.R. 2205, the "Data Security Act," this year.