Mandarin Oriental’s Hong Kong hotels hit by credit card attack

Mandarin Oriental Hong Kong and The Landmark Mandarin Oriental Hong Kong were among 10 of the company’s properties to be affected by a massive cyber attack targeting guests’ credit cards, it has been revealed.

The breach was first uncovered earlier this year, when Mandarin Oriental confirmed that the credit card systems at some of its hotels in the US and Europe had been accessed illegally. But following a major investigation, it has now been revealed that a total of 10 Mandarin Oriental hotels were targeted between 18 June 2014 and 12 March 2015, including the two Hong Kong properties.

“We believe this hacker may have used the malware to acquire the names and credit card numbers of guests who used a credit card for dining, beverage, spa, guest rooms, or other products and services at the following Mandarin Oriental properties,” the company said.

“We have not however, found any evidence of acquisition or misuse of credit card pin numbers or security codes, or any other personal guest data.”

In Asia, Mandarin Oriental Hong Kong was targeted between 18 June 2014 and 10 February 2015, while The Landmark Mandarin Oriental Hong Kong was attacked between 18 June 2014 and 3 February 2015.

Other hotels to have suffered cyber attacks include the Mandarin Oriental Boston, Mandarin Oriental Geneva, Mandarin Oriental Hyde Park London, Mandarin Oriental Las Vegas, Mandarin Oriental Miami, Mandarin Oriental New York, Mandarin Oriental San Francisco and Mandarin Oriental Washington DC.

The company said it is notifying affected guests and has established a call centre to answer guests’ questions about the breach.

“We regret that this incident occurred and are sorry for any inconvenience it may cause. We take the safety and security of our guests and their personal information very seriously, and the trust our guests place in us remains an absolute priority,” Mandarin Oriental stated.