Hilton pays USD700,000 to settle card data breach case
Global hospitality firm Hilton has been ordered to pay a $700,000 penalty for failing to disclose two separate payment card data breaches promptly enough.
More than 360,000 accounts of customers were exposed in two malware attacks which began in November 2014 and again in April 2015 but the company didn’t inform customers until November 2015.
The fine will be paid to the states of New York and Vermont which conducted a joint investigation.
Their respective state attorney generals agreed the settlement with the company.
"Lax security practices like those we uncovered at Hilton put New Yorkers’ credit card information and other personal data at serious risk," said Eric Schneiderman, New York’s attorney general.
Under the settlement terms Hilton has pledged to disclose any future breaches in a more timely fashion, strengthen its cyber security team and conduct regular security diagnostic tests on systems vulnerable to malware intrusions.
"Hilton is strongly committed to protecting our customers’ payment card information and maintaining the integrity of our systems," Hilton said in a statement.
TravelMole Editorial Team
Editor for TravelMole North America and Asia pacific regions. Ray is a highly experienced (15+ years) skilled journalist and editor predominantly in travel, hospitality and lifestyle working with a huge number of major market-leading brands. He has also cover in-depth news, interviews and features in general business, finance, tech and geopolitical issues for a select few major news outlets and publishers.
Dozens fall ill in P&O Cruises ship outbreak
Turkish Airlines flight in emergency landing after pilot dies
Boy falls to death on cruise ship
Unexpected wave rocks cruise ship
Storm Lilian travel chaos as bank holiday flights cancelled