White Lodging, a company that maintains hotel franchises under nationwide brands including Hilton, Marriott, Sheraton and Westin appears to have suffered a data breach that exposed credit and debit card information on thousands of guests throughout much of 2013, KrebsOnSecurity has learned.
If any of your employees during 2013 have stayed in Austin, Chicago, Denver, Los Angeles, Louisville or Tampa in any of these above hotels, good chance their company credit card has been compromised. I would ask for a new card just in case... More at Brian's site:
http://krebsonsecurity.com/2014/01/hotel-franchise-firm-white-lodging-investigates-breach/
It's always a question how the bad guys got in. Was it through a SQL injection on their website? A spear-phishing attack on an employee or was it like Target where they got hold of the dafault password of a third party (BMC) system admin tool? In any case, one thing you need to do as a preventive measure is security awareness training.
