Potential Credit Card Breach at Hilton Hotels

The latest large-scale victim in retail data breach bingo may be a McLean-based hotel company.

Hilton Hotels may have been subjected to a three-month data breach, according to a report from cybersecurity blogger Brian Krebs.

After speaking with sources at five banks involved in the investigation, Krebs says the breach likely targeted gift shop and restaurant purchases at hotels under several of the company’s hotel brands.

That includes Embassy Suites, Doubletree, Hampton Inn and Suites, and the Waldorf Astoria Hotels & Resorts.

It’s believed the breach went from April 21 to July 27, according to Krebs.

Read more at Krebs On Security.

Hilton released a statement to media outlets that noted its strong commitment to protecting customer data.

“We have many systems in place and work with some of the top experts in the field to address data security,” according to the statement. “Unfortunately the possibility of fraudulent credit card activity is all too common for every company in today’s marketplace. We take any potential issue very seriously, and we are looking into this matter.”

Krebs has reported extensively on retail and online information hacks, including the data breach at Target stores in 2013 that targeted point-of-sale credit card purchases.