Russian Mobsters Steal 8 Million Customer Records From Best Western
If you stayed at one of Best Western's 1,312 European hotels since 2007, the Russian mafia now has your credit information! In a nightmarish globalization fairy tale come true, an Indian hacker successfully planted a virus in Best Western's European computer systems that fed addresses, phone numbers, and credit card details to mobsters in Russia.
It is believed an Indian hacker succeeded in bypassing the security software and placing a Trojan virus on one of the firm's machines used for reservations.
The next time a staff member logged in, his or her username and password were collected, stored then put up for sale on a website operated by a branch of the Russian mafia.
The stolen data includes a range of private information such as home addresses, telephone numbers, credit card details and place of employment.
Best Western fixed the security breach on Friday after being alerted by a Sunday newspaper, which had discovered the crime.
Best Western is "investigating further" and has temporarily handed control of their systems to its American team.
If you visited an affected hotel, you may want to immediately freeze your credit report and call your bank for replacement cards.
Hackers steal details of millions of Best Western hotel guests [The Telegraph]
Indian behind major cyber-crime in UK [Press Trust of India]
(Photo: Getty)
Post a comment
Comments:
@rinse: without storing your info, how can they charge you for the $100 in room service or stuff from the fridge or damages you made to the room before checkout?
at least store info on customers from the last 3 months..... 1.5 years? another TJMaxx?
@TCameron: Duh! I prefer British pound to USA's dollars, and I'm not a mobster :)
Their value is much, much better.
Best Western fixed the security breach on Friday after being alerted by a Sunday newspaper, which had discovered the crime.
For some reason I'm picturing some Parade-type publication. And how in the world was it that a newspaper discovered this and only let Best Western know via a published story, and not the authorities?
RE "... stayed ..since 2007, the Russian mafia now has your credit information!"
I thought businesses were warned by CC companies (Visa, MC) not to store card holder info after the transaction was completed.
Or does this come from regular customers storing their CC number on business websites to 'expedite making reservations'? Hmmm, maybe it's time to make sure I haven't left CC info on any hotel, air, online purchase, etc., websites.
@timmus: You do not have to pay for a 90-day freeze. There may be a small charge for a longer freeze. You can do it by calling any one of the 3 bureaus--they are supposed to get the word out to the other bureaus.
If you can, be sure to get a copy of your report BEFORE you freeze, because the bureaus may not give you one after the account is frozen without a hassle (although they are required to by law). I recommend doing the freeze by telephone.
Finally, be sure to obtain a code from the bureau when you make the freeze, because you may need this information in order to access your report, or to let somebody else access your report.
Back to your issue. It really ticks me off the way the bureaus make it so difficult to access the free info they're required to give you by law. I've never dealt with so many click-throughs for for-fee services. They're hoping you'll get tired or anxious and cough up some dough.
Nosir. The Russian mob are the same guys skimming credit cards from sketchy ATMs worldwide.
Though I find it hilarious that the mob is outsourcing to India. Probably a Dell CSR making a little cash on the side...
Crikey people. Every reader of this site should know about credit freezes by now. Here's the data you need:
There's no 90 day about it. Those are fraud alerts and they are worthless. And it's not as easy to call them as people say. Check for the contact information on this site:
@ChuckECheese: The credit reporting companies make it hard so people will hopefully get frustrated and give up. They don't WANT you to have a freeze because, even though it makes you far more secure, it means less money for them.
@Hongfiately: Kudos to BW for jumping on this.
Good job of damage control. It did remind me that I should purge CC data that I had residing on several air travel, hotel, etc., sites.















If you visited an affected hotel, you may want to immediately freeze your credit report
How? I went to Equifax and all they have is these pay-by-the-month plans. I don't want to pay $179 a year to freeze/thaw my reports. Do I have to submit this via writing like they say here? Grr.