[BreachExchange] Hard Rock data breach affects 11 hotels, including San Diego

[Audrey McNeil]

http://www.sandiegouniontribune.com/business/economy/sd-me-hard-
rock-data-20170707-story.html

Some Hard Rock Hotel guests may be singing the blues after the company
revealed a payment card data breach Thursday spanning seven months and 11
properties, including the Hard Rock Hotel San Diego.

The Florida-based hotel chain learned in June that hackers gained access to
unencrypted payment card information for a "small subset" of customers who
booked reservations through a platform provided by third-party vendor Sabre
Hospitality Solutions.

An investigation into the breach concluded this week. Affected Hard Rock
customers have been notified, along with the Federal Trade Commission, the
company said.

The data breach took place between between Aug. 10 and March 9 and affected
an undisclosed number of guests at the Chicago hotel and other properties
including: Hard Rock Hotel & Casino Biloxi in Mississippi, Hard Rock Hotel
Cancun in Mexico, Hard Rock Hotel & Casino Las Vegas, and Hard Rock Hotel
Palm Springs and Hard Rock Hotel San Diego.

"Not all of our hotels leverage Sabre Hospitality Solutions SynXis, so only
a small subset were affected. Customers have been notified and Sabre has
contacted the FTC," the company said in a statement. "Hard Rock Hotels &
Casinos is in the process of notifying the attorneys general's offices as
required by law."

Sabre revealed the breach in May and on Wednesday concluded an
investigation that determined an "unauthorized party" accessed payment card
information through the company's reservation system. Some reservations
included the payment card security code, but no Social Security, passport
or driver's license numbers were accessed, according to the company.

"Less than 15 percent of the average daily bookings on the SynXis
reservation system during that time period were viewed," Sabre spokesman
Timothy Enstice wrote in an email Friday.

Hard Rock has music-themed venues in 75 countries, with 176 cafes, 24
hotels and 11 casinos.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20170710/6ecb27c2/attachment.html>