Hotels too often leave people vulnerable to identity theft

  • By Christopher Elliott Syndicated Columnist
  • Friday, April 19, 2013 6:40pm
  • Life

Several days after Traci Fox visited a small independent resort in the Catskill Mountains, she received an unexpected call from a shoe store.

Where did she want it to ship the $400 worth of pricey sneakers that she’d ordered?

Just one problem: She hadn’t purchased any footwear. As Fox, a college professor from Philadelphia, Pa., rummaged through her pocketbook to find her credit card, the phone rang again.

“It was Coach handbags asking if I wanted the $750 worth of handbags shipped to a different address,” she says.

Calls to her credit card revealed another bogus charge for $7,500 at Home Depot.

“Of course, I wasn’t liable for anything,” she said. “But it was still scary and frustrating.”

Fox believes that her hotel may have compromised her credit card information. At least one government agency shares her concerns.

Last summer, the Federal Trade Commission sued Wyndham Hotels, alleging that the company had failed to protect its customers’ personal information.

As a result, the FTC claims, hundreds of thousands of credit card numbers fell into the wrong hands, leading to millions of dollars in fraud-related losses. Wyndham denies any wrongdoing and is fighting the suit.

“Data security is becoming an issue of significant importance in the hospitality industry,” said Mark Schreiber, an attorney specializing in hospitality law at the Boston firm of Edwards Wildman Palmer.

He cited an increase in hacks and malware attacks, which frequently target hotel systems because they’re a rich source of personal information.

Identity theft expert John Sileo said that there’s another reason hotel guests are vulnerable to having their personal information stolen: They’re easily distracted.

“We just don’t pay attention to the details when we’re running through airports and staying in unfamiliar places,” he said. “It’s easier to miss something and to be careless.”

Data breaches can happen anywhere within a hotel. Ann Azevedo, an engineer who lives in Hartford, Conn., checked out of a chain hotel in Seattle not long ago.

A few days later, someone used her card to buy gas on the other side of the country, she says. The likely source of the breach was an ATM machine at the hotel.

“I canceled the credit card,” she said. “And I’ll never use a hotel ATM again.”

Data privacy expert Edward Hasbrouck said, “Credit card theft is much easier — and more likely — through large-scale hacking,” he said.

In the FTC’s lawsuit, for example, the agency alleges that Wyndham failed to take security measures such as requiring employees to generate complex user IDs and passwords and to properly install firewalls and network segmentation between the hotels and the corporate network, according to the agency.

It’s difficult to take preventive steps, say experts. Apart from paying with cash, there’s almost no way to tell whether a hotel will treat your personal information with care or whether it will leave a backdoor or firewall unguarded for hackers to steal your credit card information.

Large hotel chains will post their data protection policies online, “but they won’t make much sense to the average consumer,” said Richard Alderman, who directs the Center for Consumer Law at the University of Houston Law Center.

“I think consumers should continue to deal with hotels as they have in the past, knowing that almost all hotels are as concerned with customers’ privacy as are the customers,” he added.

The problem may run deeper than the theft of credit card numbers, however.

The personally identifiable information in your guest profile, such as your home address, your license plate number and your date of birth, which is attached to your reservation, can end up in the hands of a third party that offers little or no warranties about how it will protect your data.

Apart from having the hotel industry tighten security, the best way to address data theft may be through changes in consumer law.

A good starting point might be to tell consumers what information is being collected from them and passed along to third parties, Hasbrouck said.

“Most travelers would be shocked to know how many other companies the hotel may have given (the information) to in the normal course of their business,” Hasbrouck said.

Christopher Elliott is the ombudsman for National Geographic Traveler magazine and the author of “Scammed.” Read more travel tips on his blog, www.elliott.org or email him at celliott@ngs.org.

&Copy; 2013 Christopher Elliott/ Tribune Media Services, Inc.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Life

Brandon Hailey of Cytrus, center, plays the saxophone during a headlining show at Madam Lou’s on Friday, Dec. 29, 2023 in Seattle, Washington. (Olivia Vanni / The Herald)
Lynnwood-based funk octet Cytrus has the juice

Resilience and brotherhood take center stage with ‘friends-first’ band.

FILE - In this April 11, 2014 file photo, Neko Case performs at the Coachella Music and Arts Festival in Indio, Calif. Fire investigators are looking for the cause of a fire on Monday, Sept. 18, 2017, that heavily damaged Case’s 225-year-old Vermont home. There were no injuries, though a barn was destroyed. It took firefighters two hours to extinguish the blaze. (Photo by Scott Roth/Invision/AP, File)
Music, theater and more: What’s happening in Snohomish County

Singer-songwriter Neko Case, an indie music icon from Tacoma, performs Sunday in Edmonds.

Sarah Jean Muncey-Gordon puts on some BITCHSTIX lip oil at Bandbox Beauty Supply on Tuesday, Jan. 9, 2024, in Langley, Washington. (Ryan Berry / The Herald)
Bandbox Beauty was made for Whidbey Island locals, by an island local

Founder Sarah Muncey-Gordon said Langley is in a renaissance, and she’s proud to be a part of it.

Dominic Arizona Bonuccelli
Tangier’s market boasts piles of fruits, veggies, and olives, countless varieties of bread, and nonperishables, like clothing and electronics.
Rick Steves on the cultural kaleidoscope of Tangier in Morocco

Walking through the city, I think to myself, “How could anyone be in southern Spain — so close — and not hop over to experience this wonderland?”

chris elliott.
Vrbo promised to cover her rental bill in Hawaii, so why won’t it?

When Cheryl Mander’s Vrbo rental in Hawaii is uninhabitable, the rental platform agrees to cover her new accommodations. But then it backs out. What happened?

Byrds co-founder Roger McGuinn, seen here in 2013, will perform April 20 in Edmonds. (Associated Press)
Music, theater and more: What’s happening in Snohomish County

R0ck ‘n’ Roll Hall of Famer Roger McGuinn, frontman of The Byrds, plans a gig in Edmonds in April.

Mother giving in to the manipulation her daughter fake crying for candy
Can children be bribed into good behavior?

Only in the short term. What we want to do is promote good habits over the course of the child’s life.

Speech Bubble Puzzle and Discussion
When conflict flares, keep calm and stand your ground

Most adults don’t like dissension. They avoid it, try to get around it, under it, or over it.

The colorful Nyhavn neighborhood is the place to moor on a sunny day in Copenhagen. (Cameron Hewitt)
Rick Steves: Embrace hygge and save cash in Copenhagen

Where else would Hans Christian Andersen, a mermaid statue and lovingly decorated open-face sandwiches be the icons of a major capital?

Last Call is a festured artist at the 2024 DeMiero Jazz Festival: in Edmonds. (Photo provided by DeMiero Jazz Festival)
Music, theater and more: What’s happening in Snohomish County

Jazz ensemble Last Call is one of the featured artists at the DeMiero Jazz Festival on March 7-9 in Edmonds.

Kim Helleren
Local children’s author to read at Edmonds Bookshop

Kim Helleren will read from one of her books for kids at the next monthly Story Time at Edmonds Bookshop on March 29.

Chris Elliott
Lyft surprises traveler with a $150 cleaning charge

Jared Hakimi finds a $150 charge on his credit card after a Lyft ride. Is that allowed? And will the charge stick?

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.