Holiday Inn hotels hit by cyber-attack

Holiday Inn owner, Intercontinental Hotels Group (IHG), has confirmed the company has been hit by a cyber-attack.

IHG, which has some of the world’s largest hotel chains, issued a statement saying it was investigating “unauthorised access” to a number of its technology systems.

The UK-based company said its “booking channels and other applications” had been disrupted since Monday.

It manages the Holiday Inn, Crowne Plaza and Regent hotels.

“IHG is working to fully restore all systems as soon as possible,” the company said.

IHG confirmed it was assessing the nature, extent and impact of the incident and had implemented its response plans, including appointing external specialists to investigate the breach.

The company is also in the process of notifying regulatory authorities.

In a statement, the company said: “We will be supporting hotel owners and operators as part of our response to the ongoing service disruption. IHG’s hotels are still able to operate and to take reservations directly.”

But many people trying to book accommodation have been complaining.

IHG did not say there had been any loss of customer data.

It also did not specifically say it was a ransomware attack, but most of the speculation points in that direction.

Last month, a Holiday Inn in Istanbul was breached by LockBit, which released data stolen from the company.

It is not known if there is a connection between the attacks.
The hotel chain was also the target of a three-month security breach in 2017 when more than 1,200 of its franchised hotels in the US were affected.

The hack comes amid increased scrutiny on appropriate defences against cyber-attacks, particularly on Western financial institutions, in the wake of heightened geopolitical tensions following Russia’s invasion of Ukraine early this year.