News World Two out of 3 hotels accidentally leak guests' personal data -Symantec

Two out of 3 hotels accidentally leak guests’ personal data -Symantec

Two out of three hotel websites inadvertently leak guests’ booking details and personal data to third-party sites, including advertisers and analytics companies, according to research released by Symantec Corp on Wednesday.

The study, which looked at more than 1,500 hotel websites in 54 countries that ranged from two-star to five-star properties, comes several months after Marriott International disclosed one of the worst data breaches in history.

Symantec said Marriott was not included in the study.

Compromised personal information includes full names, email addresses, credit card details and passport numbers of guests that could be used by cybercriminals who are increasingly interested in the movements of influential business professionals and government employees, Symantec said.

“While it’s no secret that advertisers are tracking users’ browsing habits, in this case, the information shared could allow these third-party services to log into a reservation, view personal details and even cancel the booking altogether,” said Candid Wueest, the primary researcher on the study.

The research showed compromises usually occur when a hotel site sends confirmation emails with a link that has direct booking information. The reference code attached to the link could be shared with more than 30 different service providers, including social networks, search engines and advertising and analytics services.

Wueest said 25 percent of data privacy officers at the affected hotel sites did not reply to Symantec within six weeks when notified of the issue, and those who did took an average of 10 days to respond.

“Some admitted that they are still updating their systems to be fully GDPR-compliant,” Wueest said, referring to Europe’s new privacy law, or the General Data Protection Regulation, which took effect about a year ago and has strict guidelines on how organizations should deal with data leakage.

(Reuters)

Top Stories

‘Sailors do not need to die,’ warns captain of coronavirus-hit U.S. aircraft carrier

The captain of the U.S. aircraft carrier Theodore Roosevelt, in a blunt letter, has called on Navy leadership for stronger measures to save the...

Seven fined €150 to €450 for breaking Covid-19 decree

Famagusta district court on Tuesday handed down fines of between €150 and €450 to seven individuals for violating decrees to contain the spread of...

CBC calls for swift credit to “avoid credit crunch” due to Covid-19

The Central Bank of Cyprus in a circular issued on Tuesday called on Cypriot banks to provide swift credit to companies, self-employed persons and...

First batch of China-donated supplies arrives in Cyprus

Ambassador of China to Cyprus Huang Xingyuan has announced the arrival of the first batch of China-donated medical supplies to Cyprus. Huang Xingyuan said in...

Cyprus embassy in Madrid in contact with 30 Cypriots living in Spain

The Embassy of Cyprus in Madrid is in contact with around 30 Cypriots in Spain, mainly students as well as their families in Cyprus,...

Taste

Village olive pie

Mix the yeast with the lukewarm water and put it aside for about 12-15 minutes to settle.  Sift the flour with the salt into...

Skordalia (Garlic paste)

Rinse the potatoes and place, unpeeled, in a saucepan. Cover with water, add salt and allow to simmer for 20-30 minutes until soft. Drain,...

Village salad

A must-have with every meal is a village salad. You will find it in every tavern or greek restaurant you visit in Cyprus. Make...

Courgettes with eggs

Heat the oil in a frying pan and fry the courgettes at a medium heat until they soften. Add salt and add the eggs....