For almost as many years as it has existed, the
Federal Trade Commission has complained about being toothless when it comes to punishing retailers and other businesses. But the FTC on Tuesday (June 26) said it has found its breaking point, when one hotel chain was breached three times—all leveraging the same unpatched security holes, more than a year apart—to the tune of some 619,000 payment cards. This time—for the first time—the agency is going to trial.
The chain, Wyndham Hotels, is also accused of other supremely naughty security procedures, including storing full payment-card data in clear text, not having proper network segmentation and deploying classically bad password policies. "For example, to allow remote access to a hotel’s property management system, which was developed by software developer Micros Systems Inc., Defendants used 'micros' as both the user ID and the password," said the FTC's federal filing.Read more...