14 Trump hotels’ guest data hacked

Guests at 14 Trump properties, including hotels in Washington, D.C., New York and Las Vegas, have had their credit card information exposed, marking the third time in as many years that a months-long security breach has affected customers of the chain of luxury hotels.

The latest instance occurred between August 2016 and March 2017, according to a notice on the company’s website, and included guest names, addresses and phone numbers, as well as credit card numbers and expiration dates. The breach took place on the systems of Sabre Hospitality Solutions, a reservation booking service used by Trump Hotels, but did not compromise the Trump Hotels systems.

“The privacy and protection of our guests’ information is a matter we take very seriously,” the notice said, adding that Trump Hotels was notified of the breach June 5.

The news of the latest cybersecurity attack comes less than a year after Trump International Hotels Management paid $50,000 in penalties to New York state for failing to notify customers immediately after data breaches in 2015 led to the exposure of more than 70,000 credit card numbers and 300 Social Security numbers. The company also agreed to update its security practices as a result of the settlement.

Security analysts say hotel chains have lagged behind many other businesses in protecting their networks and have been hit hard by cyberattacks in recent years because they tend to have massive swaths of personal data and credit card information across multiple properties. Earlier this year InterContinental Hotel Group said customer credit card data had been compromised at more than 1,200 of its properties over a three-month period.