Hackers Version of Hospitality Includes Installing POS Malware on Omni Hotels Network

Everyone needs a vacation, but it’s important to remember that hackers don’t take one from trying to get your data. This time, Omni Hotels and Resorts is warning visitors that hackers have managed to get into its network and hang around for six months. Point-of-sale (POS) malware was used to grab the data of customers’ payment cards that were physically present at one of the locations.

The company posted a notice to its website earlier this month stating that malware infections began at some of the properties in December of 2015 and went on through June 2016. Information stolen includes cardholder names, card numbers, security codes, and expiration dates. Omni doesn’t know how the breach happened, but has since resolved the issue. No information has been disclosed as to how many of its customers were affected or at which particular locations this occurred.

Anyone who stayed at any Omni property during the timeframe listed should be especially diligent at checking all payment card charges. Anything that looks suspicious should be reported to the issuing institution for resolution. The sooner fraud is reported, the quicker it can be resolved and the less liability to you and the financial institution.

In addition, remember to use your cards as credit when given the option to use credit or debit. This prevents the card from being used at an ATM where someone with the PIN can use it to drain all your funds. If they have your number, expiration, and security code, they can re-create the card, but cannot get to your cash.

For businesses that use POS systems, it’s important to make sure that good security procedures are in place. For example, segment the POS devices from other sections of the network such as the check-in and restaurant functions and make sure the passwords to the administrative functions are strong and changed from the defaults. This simple action is often overlooked and can save a lot of frustration. Also make sure that all patches and updates are applied to the POS system as soon as they are made available.

It’s pretty basic, but make sure that everyone, business and home users alike have anti-malware software installed on all internet-connected devices and that it’s kept up-to-date at all times. While it sometimes won’t, the vast majority of the time it will catch the bad stuff.

Affected customers are being offered "pre-paid identify theft cleanup" services through July of 2017. Anytime a service like this is offered, take advantage of it. While it will not prevent someone from using your information, it will generally alert you should something suspicious occur.

Omni is in good company when it comes to those in the hospitality industry getting caught out by POS malware. Last year the same thing was blamed for incidents at Hyatt, Starwood Resorts, and Trump Hotels.