FTC sues Wyndham hotels over data breaches
The U.S. Federal Trade Commission has filed a lawsuit against hotel chain Wyndham Worldwide and three subsidiaries for allegedly storing data in plain text and other security failures that enabled hackers to access more than 600,000 payment card accounts in three data breaches in less than two years.
The hackers exported the payment card account data to an Internet domain address registered in Russia, according to the FTC lawsuit (PDF). They then used the data stolen from Wyndham's data center in Phoenix to make transactions, resulting in fraud losses of more than $10.6 million, the suit … Read more