A class action lawsuit has been filed against Trump Hotel Collection claiming damages arising from a data breach of guests’ credit card and personal information discovered earlier this year.
Filed in the name of plaintiff John Driscoll, the suit alleges the company ‘failed to fix elementary deficiencies in their security systems, abide by industry regulations and respond to other similar data breaches directed at retailers.’
It said a malware attack on payment processing systems between May 19, 2014 and June 2, 2015 affected an undisclosed number of customers’ personal information including card numbers, expiration dates and security codes.
The lawsuit claims this information has been posted online and made available for sale on illicit websites.
Systems were hacked at trump Hotels in New York, Chicago, Miami, Las Vegas, Waikiki and Toronto.
Trump Hotel Collection confirmed in late September a data hack had taken place at multiple hotel locations – four months after it was first discovered.
The lawsuit says the company ‘failed to disclose the breach or notify the plaintiffs in a timely manner, preventing them from protecting themselves and their identities.’
The Trump hack follows a number of similar data breaches at hotel chains including White Lodge and Mandarin Oriental which has highlighted outdated security on point of sale systems which process card transactions.
