News World Two out of 3 hotels accidentally leak guests' personal data -Symantec

Two out of 3 hotels accidentally leak guests’ personal data -Symantec

Two out of three hotel websites inadvertently leak guests’ booking details and personal data to third-party sites, including advertisers and analytics companies, according to research released by Symantec Corp on Wednesday.

The study, which looked at more than 1,500 hotel websites in 54 countries that ranged from two-star to five-star properties, comes several months after Marriott International disclosed one of the worst data breaches in history.

Symantec said Marriott was not included in the study.

Compromised personal information includes full names, email addresses, credit card details and passport numbers of guests that could be used by cybercriminals who are increasingly interested in the movements of influential business professionals and government employees, Symantec said.

“While it’s no secret that advertisers are tracking users’ browsing habits, in this case, the information shared could allow these third-party services to log into a reservation, view personal details and even cancel the booking altogether,” said Candid Wueest, the primary researcher on the study.

The research showed compromises usually occur when a hotel site sends confirmation emails with a link that has direct booking information. The reference code attached to the link could be shared with more than 30 different service providers, including social networks, search engines and advertising and analytics services.

Wueest said 25 percent of data privacy officers at the affected hotel sites did not reply to Symantec within six weeks when notified of the issue, and those who did took an average of 10 days to respond.

“Some admitted that they are still updating their systems to be fully GDPR-compliant,” Wueest said, referring to Europe’s new privacy law, or the General Data Protection Regulation, which took effect about a year ago and has strict guidelines on how organizations should deal with data leakage.

(Reuters)

Top Stories

122 new cases, one death announced on Friday

The Health Ministry announced the death of one person due to COVID-19. This raises the death toll from the virus in Cyprus to 179,...

Where to get antigen rapid tests on Saturday

The Health Ministry announced the following antigen rapid test sites for Saturday, 23 January 2021: LIMASSOL Grigoris Afxentiou Square 08:30-16:30 Gafkos Clerides Park, Germasoyia 08:30-16:30 Municipal Hall Ypsonas...

Civil servants’ trade union requests psychological support for health professionals

PASYDY, the civil servants’ trade union requested psychological support for health professionals due to the consequences of COVID-19 on their health. The trade union noted...

Scientific advisory committee to convene on Monday under President Anastasiades

Cyprus President, Nicos Anastasiades, will preside on Monday morning over a meeting of the scientific advisory committee on COVID-19. According to CNA information, during the...

Polish medics depart for Slovakia to help mass testing

A group of 200 Polish medics departed for neighbouring Slovakia on Friday (January 22) to help in a week-long testing campaign in the central...

Taste

Squash soup

Ingredients: 1 kg pumpkin, cut into small cubes, approximately 5 cups 2 medium (400g) sweet potatoes, cut into cubes, approximately 2 ½ cups 1 chopped leek, only...

Mezedes

No visit to Cyprus is complete without enjoying the traditional meal of many small dishes known as ‘meze’. This large feast, which has been a...

Prawns with fried cheese, barley shaped pasta

Put the barley shaped pasta into a small pan with salted water, bring to a boil and when tender, drain. Peal the prawns leaving...

Salmon and shrimp sheftalies

Mix all ingredients for tabbouli in a bowl and keep to one side so flavours can combine. Prepare the sheftalies: wash and soak the casing...