Hilton PoS systems hit with malware, customer details stolen

iTnews.com.au ^ | Nov 25 2015 11:29AM (AUS) | By Staff Writer

[Utilizer]

Global hotel operator Hilton Worldwide Holdings has revealed the discovery of malware in some point of sales systems in its hotels that targeted customer payment card information.

A third-party investigation found that the malware targeted specific payment card information which included cardholder names, payment card numbers, security codes and expiration dates, Hilton said.

It did not include addresses or personal identification numbers (PINs), according to the company.

Hilton advised customers who used their card at any of the global operator's hotels during a 17-week period - from November 18 to December 5 2014 or April 21 to July 27 2015 - to check their bank statements.

The hotel chain did not provide details on the number of cards affected.

[Utilizer]

Anyone who has traveled within the specified dates needs to check their financial records.

[ClearCase_guy]

Without adequate security, a PoS system becomes a POS.

[Mmogamer]

We really need a like button..

[John Valentine]

if these intruders got credit card info, wouldn’t they also have the names, dates of stay, locations etc.?

This information might be useful to evildoers wanting to target high profile individuals. Just sayin’.

[Lazamataz]

I am becoming a web-security pro. A ‘defensive’ programmer. I could help, but I’d have to telework from Atlanta, and I’m not cheap.

[wally_bert]

I’m going to switch my focus from hardware to security.

Besides the leadership is pushing for some kind of real specialization in my department. I’m a sort of jack of some IT trades.

[Vision Thing]

If hilton’s system gets hit with malware, it’s entirely appropriate to label it a PoS.

[Lazamataz]

I got some security stories, I tell ya.