Orlando-based Rosen Hotels & Resorts has posted a data breach warning for customers who visited their hotels over an 18-month period. The chain joins Hyatt, Trump Hotels, Hilton Hotels, and Starwood Hotels as the latest hotel and resort chain falling victim to data breaches.
Announced: March 4, 2016
Description of breach: According to the company, hotel chain: “We received unconfirmed reports on February 3, 2016 of a pattern of unauthorized charges occurring on payment cards after they had been used by some of our guests during their stay. We immediately initiated an investigation into these reports and hired a leading cyber security firm to examine our payment card processing system. Findings from the investigation show that an unauthorized person installed malware in RH&R’s payment card network that searched for data read from the magnetic stripe of payment cards as it was routed through the affected systems. In some instances the malware identified payment card data that included cardholder name, card number, expiration date, and internal verification code.”
Data breach period: Cards used at RH&R between September 2, 2014 and February 18, 2016 may have been affected.
Official information from Rosen: https://www.rosenhotels.com/protectingourguests/
Contact Rosen: The hotel chain has established a helpline – (855) 907-3214 – for consumer questions about the incident. The call center is open from 8 a.m. to 8 p.m. EST, Monday to Friday.
More coverage of this breach: Orlando Sentinel