Grand Hotel says some systems were accessed without authorization and urges guests to verify odd payment requests

According to United Daily News, the Grand Hotel said it found an IT anomaly on 17 February, later confirmed as an external intrusion, and that some systems had been accessed without authorization, so customer personal data may have been stolen or leaked; the scope is still being determined ^[1]. iThome reported that the hotel issued a notice on 20 February and a further statement on 21 February, saying it had cut affected connections, begun forensics, notified the authorities and asked the Ministry of Justice Investigation Bureau for help ^[2]. UDN quoted the hotel as saying operations continued and that it would carry out the required notifications ^[1]. UDN quoted the hotel urging guests who receive suspicious email apparently from the hotel, unusual payment instructions, or calls asking for passwords or financial details to verify carefully, follow a “do not click, enter or provide” rule, and contact the hotel directly if in doubt ^[1].

Industries mainly affected: Hospitality & food service

1. If you receive suspicious email that appears to be from the Grand Hotel, unusual payment instructions, or calls asking for passwords or financial details, verify carefully and do not click, enter data, or hand over information .