News Local

Staying at Trump Vancouver? Your credit card info may have been hacked

Stephanie Ip

Media tour of the opening of the Trump International Hotel and Tower in Vancouver, BC., February 28, 2017. (NICK PROCAYLO/Postmedia)

Media tour of the opening of the Trump International Hotel and Tower in Vancouver, BC., February 28, 2017. (NICK PROCAYLO/Postmedia)

If you made a booking sometime last November for a future stay at Trump Vancouver, you, too, may be the victim of hacking.

The latest comes just months after the luxury chain paid a US $50,000 penalty related to a previous security breach that resulted in fraudulent charges being made on customers' credit cards.

According to a notice posted to the Trump Hotels website recently, a digital security breach has compromised the names, phones, e-mails, addresses and credit-card information — including name, card number, expiration date and, in some cases, security code — of guests who used their reservation system between Nov. 8 and 19, 2016 to making hotel bookings at a number of Trump properties, including the Trump International Hotel and Tower Vancouver.

The months-long breach spans 14 Trump properties worldwide and began in November 2016 and extended to March 2017. In the case of Trump Soho, the breach was found to have affected information as far back as July 2016.

The hack affected the Sabre Hospitality Solutions' central reservation system, used by Trump properties to process and manage bookings. The Trump properties' own systems were not hacked, the notice maintains.

"Following an investigation, Sabre notified us on June 5, 2017 that an unauthorized party gained access to account credentials that permitted access to payment card data and certain reservation information for some of our hotel reservations processed through Sabre’s CRS," the notice read.

"We are working with Sabre to address this issue. We understand that Sabre engaged a leading cybersecurity firm to support its investigation."

It is the third hack on the Trump hotels in the past three years, with some suggesting the properties have become more of a target due to Donald Trump's foray into politics, capped by his victory in last November's U.S. presidential election.

According to the Washington Post, attackers first hacked Trump hotels' network and payment system in May 2014 in order to pull customers' payment card information. Management was not aware of the breach until more than a year later.

Then in November 2015, just five months after discovering the previous breach, another attacker installed malware affecting five properties before later accessing another system that held personal information for Trump hotel property owners. Information available in that system included names and social security numbers.

Last September, the Trump chain paid US $50,000 in penalties linked to the 2014 breach.

The $360-million Vancouver Trump property officially opened in February this year. Trump does not own the property, but has licensed his name and manages the hotel. The property is owned by Joo Kim Tiah, CEO of TA Global Berhad.

Dozens of people protested outside the property earlier this year, once during the Women's March in January and again during the hotel's grand opening in February.

sip@postmedia.com

twitter.com/stephanie_ip