Cybersecurity

Marriott Breach Exposes Weakness in Cyber Defenses for Hotels

  • Hack affected up to 500 million guests; linked to Chinese
  • Commerce Secretary Ross says firms must invest in security

Pedestrians walk past a Marriott International Inc. hotel in Chicago, Illinois.

Photographer: Daniel Acker/Bloomberg

Long before Marriott International Inc. disclosed a massive security breach, the hotel industry had earned the dubious reputation as a hospitable place for hackers.

Thieves have skimmed credit cards, looted loyalty accounts, and mounted complex schemes to trick clerks into downloading malicious software. In one elaborate series of attacks known as DarkHotel, networks at individual properties were hijacked to spy on corporate executives and politicians. In a cruder ploy, crooks have even seized control of a keyless entry system, locking down rooms until the hotel owner paid a ransom.