[警訊] 客戶資料外洩，萬豪大鑊過因航

[mtr]

https://marriott.gcs-web.com/news-relea ... e-security

... it contains information on up to approximately 500 million guests who made a reservation at a Starwood property.

For approximately 327 million of these guests, the information includes some combination of name, mailing address, phone number, email address, passport number, Starwood Preferred Guest (“SPG”) account information, date of birth, gender, arrival and departure information, reservation date, and communication preferences.

For some, the information also includes payment card numbers and payment card expiration dates, but the payment card numbers were encrypted using Advanced Encryption Standard encryption (AES-128).

There are two components needed to decrypt the payment card numbers, and at this point, Marriott has not been able to rule out the possibility that both were taken.

For the remaining guests, the information was limited to name and sometimes other data such as mailing address, email address, or other information.

[mtr]

香港資訊科技商會榮譽會長方保僑說，酒店業和航空業多次被黑客攻擊，除了因爲業界擁有很多客戶資料，亦與業界對接多個全球性訂房和訂位系統有關。他又稱美國一個酒店集團，數年前曾經發生住客資料外洩事件，這次事件不算罕見。

他說很多全球性訂房系統，10多年來都沒有更新，保安級數維持在當年的水平，甚至沒有保安可言。他估計，黑客透過攻擊全球性訂房系統，透過中間的接駁點，攻入酒店的後端系統取得客戶資料。

https://www.singpao.com.hk/index.php?fi=news1&id=89202

[mtr]

https://www.facebook.com/ericfankm.hk/p ... 6837746945

香港資訊科技商會資訊保安召集人范健文說，這次用戶外洩資料數目龐大，系統在4年前開始被黑客入侵，形容事件罕見。范健文他估計，事件與酒店網上訂房系統，甚至内聯網出現漏洞有關，建議若市民近幾年曾經使用信用卡光顧萬豪，要考慮更換信用卡。

[peterso]