13 July, 2017
According to the notice, an investigation into the incident discovered that an unauthorized party first gained access to payment card data and other information, including the names, emails, addresses and phone numbers of guests, between August 10, 2016 and March 9, 2017.
The unauthorized party in this data breach accessed payment card information for certain hotel reservations and, in some cases, guest contact information.
"Following an investigation, Sabre notified us on June 5, 2017 that an unauthorized party gained access to account credentials that permitted access to payment card data and certain reservation information for some of our hotel reservations processed through Sabre's CRS", the Trump organisation said in a statement.
The breach happened at the central reservation system, which takes bookings through hotels, online travel agencies and other booking services, and affected 14 Trump properties including the Trump International Hotel in Washington, DC.
Trump International Hotels Management later agreed to pay up $50,000 to settle with NY state over the data breaches, which resulted in the theft of 70,000 credit card numbers and 300 Social Security numbers.
The breach is part of a cyber attack on Sabre's systems disclosed in May.More news: Juncker slams European Parliament "ridiculous" in unusual attack
"Every organisation entrusted with PII - both the direct-to-consumer providers such as the hospitality chains and the third parties such as Sabre - should constantly be testing and hardening their defences, and embracing more proactive and effective levels of security such as consumer behaviour analytics solutions to help prevent identity thefts".
'Then you look at Trump's hotels, and they're obviously a highly symbolic target'. The first time occurred in May 2014, when hackers installed malware onto Trump hotels' payment processing system, the Post reported.
There's a very interesting discussion going on in the United States right now about whether President Donald Trump and his family have been in touch with Russian government agents presumably tied to Russian hackers. The hotel chain learned of the breach in June 2015 but waited an additional four months to notify those affected.
In May 2014, hackers installed malware created to swipe payment card information in the computer systems of seven Trump Hotels.
Some customers had their personal information taken from several Trump Hotel locations. "Well, because they're a good target", Peter W. Singer, a senior fellow at the New America Foundation, told the Washington Post.