Luxury hotel chain in Thailand reports data breach

[webfact]

File photo for reference only

 

Cyberattackers claimed to have stolen the passport details and other personal information from visitors who stayed at Centara Hotels & Resorts.

 

By Jonathan Greig

 

A luxury hotel chain in Thailand is reporting a data breach thanks to a notorious group of cybercriminals who have been behind a spate of attacks in recent weeks. 

 

Thirayuth Chirathivat, CEO of Centara Hotels & Resorts, said in a statement that on October 14, they were "made aware" of a cyberattack on the hotel chain's network.

 

An investigation confirmed that cyber attackers had in fact breached their system and accessed the data of some customers. The data accessed includes names, booking information, phone numbers, email addresses, home addresses and photos of IDs. 

 

Full story: https://www.zdnet.com/article/luxury-hotel-chain-in-thailand-reports-data-breach/

 

-- © Copyright ZDNet 2021-10-29

 

- Whatever you're going through, the Samaritans are here for you

- Follow ASEAN NOW on LINE for breaking COVID-19 updates

[ExpatOilWorker]

8 minutes ago, webfact said:

The data accessed includes names, booking information, phone numbers, email addresses, home addresses and photos of IDs. 

.....and credit card information?????

[ezzra]

57 minutes ago, webfact said:

A luxury hotel chain in Thailand is reporting a data breach thanks to a notorious group of cybercriminals

Many establishments just don't want to pay for proper IT protection thinking " it's not going to happens to us" easy money this cyber-crimes with many crocks getting away with the it and making millions in the process as happened with several Thai banks recently...

[ourdon]

Ohh Gawd,

 

I do hope the government doesn't take too much notice.  If they realize that there is an easier way to separate a foreign person from his/her money we are in the deep doodoo.  Never mind the petty grifts they are used to pulling 

[TheFishman1]

The government making visitor.  Doing a COE or Thai Pass Before arriving who hotels to stay for the quarantine is giving the hackers an open door TIT

[HaoleBoy]

These hotels keep their hardcopy of your passport (or DL) when registering too.   Your phone # is written on this copy as well.

I asked to get my hardcopy back at a BKK hotel when leaving to tear it up, but they refused.  They said they needed it to give to some Gov agency.

 

There's so much room for thieves to work in Thailand.  Just look at all the paper copies given to Immigration ... 

[NE1]

18 minutes ago, HaoleBoy said:

Just look at all the paper copies given to Immigration ... 

and banks and post offices and hospitals.

[ThailandRyan]

For the past two days I have been getting annoying cell calls from I believe scammers. Started suddenly and now I think I know why. My Centara account was probably one of those hacked.

[elgenon]

1 hour ago, ourdon said:

Ohh Gawd,

 

I do hope the government doesn't take too much notice.  If they realize that there is an easier way to separate a foreign person from his/her money we are in the deep doodoo.  Never mind the petty grifts they are used to pulling 

Then you are sure it wasn't the government?  ????

[sammieuk1]

And it will be found to be your fault if you get rinsed no doubt ????

[jacko45k]

7 minutes ago, ThailandRyan said:

For the past two days I have been getting annoying cell calls from I believe scammers. Started suddenly and now I think I know why. My Centara account was probably one of those hacked.

Been getting a few of those SMS messages (with  name not a number) in Thai that are phishing or scamming myself. At least one can block call numbers easily.

[mrfill]

2 hours ago, ezzra said:

Many establishments just don't want to pay for proper IT protection thinking " it's not going to happens to us" easy money this cyber-crimes with many crocks getting away with the it and making millions in the process as happened with several Thai banks recently...

An encrypted database costs nothing. You just click the 'encrypt database' button when setting it up - if you can be bothered.....

[phetphet]

i have lost so much information to these scammers here in Thailand in the past year or two. It's scary. Bank and airlines databases stolen.

 

All this unnecessary information collection leaves us all wide open to fraudsters..

From government to  a certain BTS card requiring passport and phone number to top up..And another one starting next weeek...Thailand Pass.

Even buying a coffee machine, the amount of information they try to collect is ridiculous.

And they wonder why people are reluctant to input information into their various Covid apps.

Edited October 29, 2021 by phetphet

[hotchilli]

3 hours ago, ExpatOilWorker said:

.....and credit card information?????

Almost certainly.

Safe trusted Thailand... not

[Skeptic7]

Stayed in June...Udon Thani. ????

Not overly concerned tbh. 

[Mywayboy]

They have one complete Vault in Bangkok for all the paperwork I've filled in I'm sure. 

[superal]

As a tech dinosaur I find that most transactions are worrying because they either involve the downloading of apps , declaring your card details or showing/ passing over some form of personnel details , such as your passport  . The days of cash transactions are getting fewer and fewer but security does not seem to be keeping pace .  Pre-booking hotels does not stop the hotel from taking your passport for a day and you hope it does not fall into criminal hands as it is a valuable document .   

[Rampant Rabbit]

4 hours ago, ExpatOilWorker said:

.....and credit card information?????

That  cashless  society is really working out  well  isnt it

[konaboy]

I received a suspicious e from Pay Pal yesterday. Wanting me to re-register??

Anyone else?

[johng]

In other news this same  large retail conglomerate is trailing  Bitcoin payments..totally secure   right ?? ( trial in house with employees only)

[mikebell]

35 minutes ago, konaboy said:

I received a suspicious e from Pay Pal yesterday. Wanting me to re-register??

Anyone else?

I get 3 a week from Pay Pal which I dutifully forward to Pay Pal but have noticed no discernible improvement. I've stopped using them.

[bobandyson]

1 hour ago, TigerandDog said:

They just checked the extension stamp in my passport and issued the new 90 day report receipt. 

2 years of doing 90 day reports at MTT and the last one at Chaengwattana that's all they've ever done. Hand over passport and 1 form and that is it, I've never handed over nor been asked for anything else.

[HappyExpat57]

2 hours ago, elgenon said:

Then you are sure it wasn't the government?  ????

I would NOT put it past some of them!

[HappyExpat57]

I'm sure the Thai Pass system will have much better security.

[Peterphuket]

2 hours ago, NE1 said:

and banks and post offices and hospitals.

Yes, post offices so too, ridiculous, when you send a parcel for example to Chiang Mai, again your passport....telephone number...maybe next time the license plate from my car?

[MrJ2U]

Their hotels are like there data security.

 

Both need updating to the 21st century.

[Bangkok Barry]

4 hours ago, ourdon said:

Ohh Gawd,

 

I do hope the government doesn't take too much notice.  If they realize that there is an easier way to separate a foreign person from his/her money we are in the deep doodoo.  Never mind the petty grifts they are used to pulling 

Don't worry. The government has repeatedly demonstrated that its IT skills aren't even capable of producing various apps and websites that operate reliably or at all. Being able to hack into data is probably far beyond their ability.

[Bangkok Barry]

2 hours ago, hotchilli said:

6 hours ago, ExpatOilWorker said:

.....and credit card information?????

Almost certainly.

Safe trusted Thailand... not

Too sensitive for them to admit to.

[Bangkok Barry]

1 hour ago, Mywayboy said:

They have one complete Vault in Bangkok for all the paperwork I've filled in I'm sure. 

Why do you think they want to fly to the moon? They've run out of storage space on Earth.

[Hockeybik]

Sadly, few businesses or organizations of any size in Thailand take cyber security seriously.