Tag Archives: Hotel Security

Hospitality Industry Security Risks: Thirty Arizona Hotels Burglarized By “Electronic Door Hackers” Using Portable Programming Devices; TV’s, Laptops And Credit Cards Stolen

“…Surveillance video showed the suspects, both white males in their 20s, entering the hotel and then leaving with the victim’s suitcases… some Onity Electronic Lock30 local hotels — probably more — have been targeted by hotel hackers. Investigators believe there are more suspects than those caught on surveillance video…hotel hacking is not just a local problem. Because the technology used to open the electronic locks is so easy to obtain and use, hotel hacking is growing issue nationwide…”

A man and a woman have been burglarizing hotel and motel rooms in the Easy Valley and now Silent Witness is offering a reward for information about them. According to Silent Witness, the pair, dubbed “Hotel Hackers,” used portable programming devices to get into the rooms at various locations in Mesa, Tempe, Scottsdale and possibly Avondale. It’s not clear how many locations the pair has hit, but Silent Witness said the crime spree started on Feb. 25.

The suspects have stolen TVs, bedding, laptop computers and guests’ personal belongings, including credit cards.

Silent Witness released surveillance video (above) and photos of the pair, both of which were taken at a Walmart store where the suspects used a stolen credit card.

For more:
http://www.azfamily.com/news/Hotel-Hackers-behind-burglaries-at-hotels-motels-in-East-Valley-207552391.html

Leave a Comment

Filed under Crime, Guest Issues, Insurance, Liability, Risk Management, Theft

P3 Hospitality Industry Risk Report: “Improving Hotel Security After Boston” Presented By Petra Risk Solutions’ Director Of Risk Management Todd Seiders (Video)

In the wake of the Boston Marathon bombings, it’s time to re-examine our security efforts and update our attitudes and training. Petra Risk Solutions’ Director of Risk Management, Todd Seiders , offers a P3 Hospitality Risk Update – ‘Improving Hotel Security after Boston’. 

P3P3 (Petra Plus Process) is the Risk Management Division of Petra Risk Solutions – America’s largest independent insurance brokerage devoted exclusively to the hospitality marketplace.

For more information on Petra and P3 visit petrarisksolutions.com or call 800.466.8951.

Leave a Comment

Filed under Guest Issues, Insurance, Liability, Management And Ownership, Risk Management, Training

Hospitality Industry Security Solutions: Hotels In Metropolitan Areas Should “Create Actual Security” With “Layers Of Properly Trained Personnel”; A Need For Sophisticated Security Cameras For Thermal And Infrared Viewing

“…what (hoteliers) want to create is actual security and depth—layers of properly trained personnel to meet the risks that are known for the venue you’re in…if you’re in Times Square, covert effort is more appropriate…vulnerability audits help find ‘weakness in the system that can be hotel securityexploited or lapse during a crisis’…the audit shows some oft-forgotten measures, such as making sure the hotel’s website can handle a thousand times the traffic without crashing or that associates know appropriate protocols….every employee is a crisis manager and a (public relations representative) for the organization…’if you don’t teach them what they should and shouldn’t do, they’ll wing it’, and that can be dangerous to a hotel’s reputation…”

“…(sophisticated security equipment such as) thermal and infrared viewing for nighttime and low-visibility conditions, license plate readers, car counters, people counters, cameras with analytics that follow subjects automatically and alert critical areas of operation…”

While hotels can be safe havens for guests, they can be the target of attacks as well. Anthony C. Roman, president of risk-management firm Roman & Associates, said the hotel industry has suffered in the last decade. Hard economic times globally have caused hotels to cut back on security budgets. As more hotels are taking the appropriate preventive security measures, other hotel brands have not addressed the issue at all. “And yet other brands are subcontracting their security requirements to private security companies,” he said.

The constant flow of large numbers of people in and out of hotels during daily business hours makes them vulnerable for attacks, according to global intelligence agency Stratfor. “There’s certainly fear,” Haley explained. “There are few targets that offer the potential awards for motivated terrorists that hotels do.” Those rewards are a large target with potentially massive body counts and global exposure. The problem with hotels, he added, is “they’re open and inviting places.”

For more: 
http://www.hotelnewsnow.com/Articles.aspx/10326/Terrorism-risks-heighten-hotelier-awareness

Leave a Comment

Filed under Crime, Guest Issues, Liability, Management And Ownership, Risk Management, Technology, Training

Hospitality Industry Security Risks: Hotels And Resorts Are “Vulnerable To Security Threats” And Crime As Staff Is Trained To Maximize Guest Experience

“…Because of the nature of their business, implementing TSA-style security measures at hotels would not be a good idea, Todd Seiders says. “They would have to limit the entry into their buildings, search bags, confirm you have business there and inconvenience everyone. The general department of homeland_securitypublic will not stand for that (look at the continuing uproar about the TSA at airports).”…Complicating the issue is the fact that hotel staff members are, by and large, trained to please potential guests, which can render them vulnerable to security threats…”

Todd Seiders, director of risk management at Petra Risk Solutions and former director of loss prevention at Marriott, discussed how hotels and public events can work to increase traveler safety in the future.

“The Boston Marathon bombing is just another example of how hard it is to secure public places and events,” Seiders says. “According to the news, bomb dogs had swept the finish line area 1 hour prior to the start of the marathon. So obviously police did everything they could to secure the area, and the bombs were brought in during the event.”

“There is a constant clash between hotel security experts and seasoned hotel management people, whose pay and bonuses depend on guest satisfaction surveys and comments,” Seiders continues. “Hotel security experts need to find more guest friendly ways to provide security, and hotel managers need to take security more seriously. A large number of hotels do not have a dedicated security staff, so security falls on the guest service staff, and guest service staff is trained never to say no or to offend or interfere with the guest experience.”

Seiders recommends hotels install HD cameras to monitor open public spaces, exits and entrances, both to deter crime and to aid investigation should one occur. Staff should be trained to pick up and investigate unattended bags or luggage, and hotels should work closely with their local police of sheriff department, along with Homeland Security, to discuss security and terrorism.

For more: 
http://www.travelagentcentral.com/trends-research/trend-watch-suspects-boston-bombings-surface-whats-next-travel-security-40155

Leave a Comment

Filed under Crime, Guest Issues, Labor Issues, Risk Management, Training

Hospitality Industry Theft Risks: Hawaii Hotel Employee Arrested For Stealing $11,000 Worth Of Jewelry And Goods From Luggage In Storage Room

“…a review of video surveillance of the storage room revealed that Bueno allegedly entered into the storage room through the service elevator, picked up and concealed the bags within his work cart and exited the hotel securitystorage room…a few minutes later shows (him) allegedly reentering the storage room and placing the bags back on a bellman cart, then exiting again through the service elevator…”

An employee from a hotel in Wailea was arrested on Monday on suspicion of theft after a couple visiting from Maryville, MI, reported more than $11,000 in jewelry and other goods missing from their bags after check-in, police said. Maui police arrested resort houseman, John Bueno for alleged second degree theft in connection with the incident.

According to police reports, the couple arrived at the hotel at around 1:20 p.m. on Monday Feb. 11, checked their bags with a bellman, and proceeded to the pool area to wait until their room was ready.

A few minutes later, police say the female visitor returned to the bell desk and inquired about one of the bags to retrieve an item from within. A check of the storage room found all of their bags missing, and a search of the area by security personnel and hotel managers turned up with negative results.

A few minutes later, another check of the storage room revealed that the bags were returned; however, upon checking each bag, it was learned that various pieces of jewelry and a camera totaling $ 11,100 were missing, said Maui Police Lt. Wayne Ibarra.

Bueno was placed under arrest later that afternoon, and posted bail, which was set at $1,000. He is scheduled to appear in court at 10:30 a.m. on March 14, 2013.

For more:  http://mauinow.com/2013/02/14/wailea-hotel-worker-arrested-in-theft-case/

Leave a Comment

Filed under Crime, Guest Issues, Labor Issues, Liability, Risk Management, Theft

Hospitality Industry Security Risks: Hotels Should Employ “Motherboard Fix” To Make Electronic Door Locks Secure From Hacking And Break-In

“It’s the older Onity locks that are subject to hacking,” Seiders said. “With the old locks, which were the best at the time, the encryption code that authorizes the lock to open has been installed on all of those individual Onity Electronic Locklocks. The hacking device, when it’s plugged into the lock, fools the lock into thinking it’s an authorized programmer. The newer locks don’t have the encryption code in each one; the code is issued at the front desk.”

Following a robbery at a Houston hotel in which thieves exploited security flaws in Onity locks first revealed at the Black Hat conference in July, Hotel Management spoke with Todd Seiders, director of risk management at Petra Risk Solutions and former director of loss prevention at Marriott, for tips on how hoteliers can keep their rooms secure.

“[Onity] immediately started offering the caps and screens to block the port that causes the vulnerability, but I don’t think that’s a very valuable option, because if you block these terminal ports and you have an emergency in the room and the lock has failed, you have to be able to plug in the portable programmer or you’ll have liability issues,” Seiders said. “The thing to take advantage of now is the motherboard switch out. If you mail it in within a reasonable amount of time they’ll replace it for free. The motherboard fix, that’s what these hotels should be doing.”

While Seiders noted that the recession has meant less money available for full-time security staff and new equipment like cameras, he emphasized the importance of staff training in hotel security. “My advice is to go walk the halls and if you see a person standing in the hallway go and look at him for 60 seconds. He’ll either go to a room, or, if not, approach him and say ‘what’s up,’ find out if you can help him. Customer service is the best security.”

Seiders also pointed out that the newer models are not as vulnerable to hacking.

In a statement from Onity, the company said, “Over the next several weeks, we will ensure all hotel properties in our database receive the mechanical solution. These mechanical caps and security screws block physical access to the lock ports that hackers use to illegally break into hotel rooms. The mechanical solution remains free of charge to customers. Technical solutions vary depending on the age, model and deployment of locks at properties.”

For more: http://www.hotelmanagement.net/operations-management/keep-your-rooms-secure-from-door-lock-hackers

Leave a Comment

Filed under Crime, Guest Issues, Liability, Maintenance, Management And Ownership, Risk Management, Theft

Hospitality Industry Security Risks: Hotel Electronic Door Locks In “Various Stages Of Being Repaired”; “Mechanical Caps And Security Screws” Provided To Block Hackers

In October, hotel insurance-related company Petra Risk Solutions issued its hotel clients an alert headlined, “Crime Alert – Onity Guestroom Door hackers are for real.”

Onity Electronic LockIn Florida, Petra loss prevention expert Todd Seiders said he received reports that a hacker had been seen carrying a laptop and using a key card – possibly connected to the laptop – to open locked guestroom doors.

The locks on more than 1 million guestroom doors are in various stages of being repaired, following the revelation this summer that they may be vulnerable to hackers.

The New York Marriott Marquis, the biggest hotel in Manhattan, for instance, just completed updating all of its nearly 2,000 door locks. The hotel is one of thousands of properties with guestroom locks manufactured by Onity, a division of United Technologies. An Onity website also shows Sheraton, Hyatt, Holiday Inn, Fairmont, Radisson and other well-known hotels from Paris to Perth as also having its locks updated.

The hacking tool, according to Petra’s alert, could be made for about $50 in easy-to-acquire electronic parts.

“Please train and notify your hotel staff that these burglaries are spreading across the country,” Petra’s alert cautioned hoteliers. “Hotel staff should be vigilant while they are on the guest floors and paying attention to guests walking through hallways…Take time to watch guests walking through your hallways to ensure they are going to a room and entering it. Be very suspicious of someone carrying a laptop or small bag wandering the hallways. Greet guests and ask them if they need assistance.”

Onity did not immediately return an e-mail seeking comment about the issue. But in a statement updated for December on its website, Onity says that as of Nov. 30, it has shipped hardware to fix 1.4 million hotel door locks. The hardware includes mechanical caps and security screws that “block physical access to the lock ports that hackers use to illegally break into hotel rooms.”

For more:  http://www.usatoday.com/story/hotelcheckin/2012/12/14/hotels-fixing-flaw-that-made-room-locks-vulnerable-to-hackers/1769081/

Leave a Comment

Filed under Crime, Guest Issues, Liability, Maintenance, Management And Ownership, Risk Management, Technology, Theft

Hospitality Industry Crime Risks: Tennessee Hotel Rooms Broken Into By “Convicted Burglar” Using “Chiseled Tip Knife” And Keycards Stolen From Cleaning Carts

“…Police said Brown was carrying seven keycards from several hotels as well as knife with a chiseled tip that could be used to defeat locking mechanisms…He told police he had taken the keys from a cleaning cart…”

Police are investigating whether a man who allegedly broke into a hotel room in downtown Nashville had any involvement in ten other similar hotel burglary since January.

Police said the victims were inside their hotel room on the 13th floor of the Renaissance Hotel when 35-year-old Antoun Brown came in and asked where the ice machine was, and then made his way into the bathroom before leaving.

The victims told police they heard someone messing with their door lock before he came inside.

Hotel security apprehended him on the 4th floor and held him until police arrived to take him into custody.

Brown, who is a convicted burglar, was charged with aggravated burglary and possession of a burglary tool.  His bond was set at $13,000.

For more:  http://www.newschannel5.com/story/20040554/man-allegedly-broke-into-downtown-hotel-room

Leave a Comment

Filed under Crime, Guest Issues, Liability, Maintenance, Risk Management, Theft

Hospitality Industry Security Risks: Florida Hotel And Management Company Ordered To Pay $1.7 Million To Victim Of “Car Jacking” In Parking Lot; “Inadequate Hotel Security And Burned Out Lights In Parking Area”

“…evidence showed “security was present, but spent more time delivering bed items, towels, and bell carts to guests rather than patrolling the exterior of the hotel and serving as a deterrent to crime. The hotel provided a ‘uniformed housekeeper,’ not security…”

In addition, lights that would have illuminated the area where the crime occurred were burned out and hadn’t been replaced for months.

An Orange County jury Friday ordered Hilton Embassy Suites, Interstate Management Company, and SecurAmerica to pay a combined $1.7 million dollars in restitution to Troy Anderson, who was shot in 2008 while parking his car at the Hilton Embassy Suites on Jamaican Court, near International Drive.

Anderson filed a lawsuit in 2009 for the shooting that occurred on the premises of the Hilton Embassy Suites on September 26, 2008, when he was shot multiple times during a car jacking. He sustained serious and life-threatening injuries as a result. (Troy Anderson v. Hilton Hotels, et al., Case No. 2009-CA-040473-O, Fla. 9th Judicial Cir.).

A former Regional Manager, Chuck Klawitter, testified the hotel would “wait until enough lights were burned out to justify getting a ‘hi-light’ to replace the burned out lights.” Klawitter and two other former SecurAmerica employees, Emmanuel Denau, a former Quality Assurance Supervisor, and Rob Wombolt, a former Operations Manager, testified they brought their security concerns to the attention of the hotel and the security company.

Witnesses testified that the area where hotel personnel instructed Mr. Anderson to park his vehicle was “very dark,” even though it was only 50 or 60 feet from the hotel entrance. Crime Scene Investigator (CSI), Gerardo Bloise, Orange County Sheriff’s Department (OCSO), photographed and documented the scene and his photographs confirmed that a critical floodlight intended to illuminate the area where Mr. Anderson parked was not working on the night he was shot. CSI Bloise confirmed in his testimony the area was “very dark.”

Assistant Hotel General Manager, Victor Vergara, claimed and testified at trial, contrary to the evidence, that all the lights were working and the parking lot lighting was “perfect.”

Jurors also learned that a similar strong-armed robbery had occurred in the parking lot of the Embassy Suites ten days prior. Deputy Lourdes Clayton of the OCSO appeared on the scene of the armed robbery ten days earlier and was on the Hilton Embassy Suites’ property for approximately an hour. The hotel and security company denied knowing she was on the property though in following protocol she would have arrived with lights and sirens on as the call was a Code 3 emergency. She also completed an “incident report,” which is a public record and which was brought out in her testimony at trial where she verified she was on the property for “approximately an hour.” The victim who was robbed at gunpoint, 72-year-old Roger Kraft from Ohio, stayed an additional two nights at the hotel, yet the hotel and security company argued he did not tell anyone about being robbed despite the fact his wallet, cash, and credit cards were stolen. Allen told the jury the assertion was “ridiculous.” Mr. Kraft unfortunately passed away a year and a half ago.

For more:  http://news.yahoo.com/orlando-hotel-ordered-pay-1-7-million-dollars-082430903.html;_ylt=A2KJjakMeZpQcGcAaXDQtDMD

Leave a Comment

Filed under Crime, Injuries, Insurance, Liability, Maintenance, Management And Ownership, Risk Management

Hospitality Industry Information Security Risks: Hotel’s Guest’s Credit Cards Are Targets For “Identity Thiefs” From “Mulitple Charges” During Stay

“…hotels have lots of employees — and many of them have access to the credit card and other personal information of guests. No matter how well trained and supervised, more personnel correlates to greater risk. The fact that low-level employees typically have access to key guest information, and that there is, historically, a high turnover in hotel employees, exacerbates the problem…”

Hotels are obvious targets for identity and financial theft for many reasons. Hotels transact business through credit cards, and those credit cards are kept on file and can be accessed multiple times during a guest’s stay. The possibility that a credit card charge will be recorded occurs with each night’s room charge, room service, bar or restaurant bill, spa charge, and so on. Every charge is another opportunity for an identity thief to access the information using sophisticated computer hacks and other malicious software, generally without the hotel’s knowledge.

The need to respond to guest demands is another source of insecurity. The Identity Theft Resource Center noted, “The ability to connect to the Internet is an integral part of many individuals daily life. This has led to the increased demand for public WiFi.” As a result, hotels find themselves compelled to offer wireless internet, and that service is almost always unsecured. But an unsecured wireless network is “just as dangerous as leaving files of your most important personal documents on a street curb for all to see. Hackers can easily get into an unsecured wireless network and get financial information, business records or sensitive e-mails.” (PC World, “Got Wireless Security”, http://www.pcworld.com/article/125040/got_wireless_security.html). At the same time, hotels have little say in the matter. Guests demand wireless internet service.

Some security researchers have described a wave of attacks against the hospitality industry. In 2010, the cybersecurity consultant Trustwave found that in 38% of its investigations, hotels and resorts were the victims of successful cyber intrusions, despite those firms only representing 3% of its customers.  Hotels represent a disproportionate number of security breaches.

For more: 
http://hotellaw.jmbm.com/2012/10/liability_for_guest_information_.html

1 Comment

Filed under Crime, Guest Issues, Liability, Management And Ownership, Risk Management, Technology, Theft