Six Continents Hotels

Six Continents Hotels reported a data breach to the Montana Attorney General. The breach was reported on 2017-04-14. The breach occurred from 9/29/2016 to 12/29/2016. 3,949 Montana residents were affected.

Six Continents Hotels, Inc. (d/b/a InterContinental Hotels Group) reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-04-14. 14,250 Massachusetts residents were affected. The report records the breach type as electronic.

InterContinental Hotels Group (IHG) notified guests of a payment card breach at IHG-branded franchise hotel locations in the Americas. Malware was found operating on front-desk payment card processing servers between September 29 and December 29, 2016, capturing track data (cardholder name, card number, expiration date, internal verification code) from magnetic stripes. Malware eradication was confirmed in February–March 2017. IHG engaged a cybersecurity firm and notified law enforcement.

Six Continents Hotels, Inc. (IHG) notified the Washington AG of a malware incident affecting payment card data at franchise locations in the Americas. Unauthorized access occurred between Sept 29, 2016, and Dec 29, 2016. Malware captured track data from magnetic stripe cards at front desks. 13,825 Washington residents were notified. IHG engaged a cybersecurity firm, notified law enforcement, and implemented point-to-point encryption (SPS) to remediate.

IHG notified NH AG of malware at franchise hotels (Sept-Dec 2016) stealing payment card track data. 3,956 NH residents affected. Malware eradicated; law enforcement notified.

Six Continents Hotels, Inc. (d/b/a InterContinental Hotels Group) reported a data breach to the Oregon Attorney General. The breach was reported on 2017-04-14. The breach occurred during 9/29/2016 - 12/29/2016. The breach was discovered on 2/28/2017. 1,043,686 individuals were affected. Notice was sent on 4/14/2017.

InterContinental Hotels Group (IHG) notified guests of a payment card data breach at 12 properties in the Americas. Malware installed on servers processed payment cards used at restaurants and bars between August 1, 2016, and December 20, 2016. The malware captured track data including cardholder name, card number, expiration date, and internal verification code from magnetic stripes. IHG discovered the incident on December 28, 2016, after reports of unauthorized charges. Front desk transactions were not affected. IHG engaged cybersecurity firms, notified law enforcement, and worked with payment card networks to monitor affected cards.

Inter-Continental Hotels Corporation reported a data breach to the California Attorney General on July 4, 2013. The incident occurred on July 4, 2013. The breach involved the exposure of personal information, including names and credit card numbers, of customers. The specific attack vector and number of affected individuals were not disclosed in the summary record.