FlyerTalk Forums - View Single Post - Consolidated "Hilton Honors Account Hacked" thread
Old Oct 1, 2014, 12:56 pm
  #26  
sdsearch
FlyerTalk Evangelist
 
Join Date: Jan 2005
Location: home = LAX
Posts: 25,933
Originally Posted by Baze
Don't think you need to change the account number but definitely change you user name and password to get into the account.
Huh???

When I got the Hilton HHonors website I see it ask for:
Username or HHonors #
Password or PIN
In other words, if all you change is your username and password, but someone has your account number and PIN, they can still sign in with that!

So it seems to me the most someone can do (without changing their account number) is to change their 4-digit PIN (as well as their username and password, if they have those).

But that 4-digit PIN is the only thing stopping someone who knows your account number from logging into your account, as far as I can see.

(Delta is dropping the ability to log on with a PIN at the end of the year. But BA still has PIN sign-in too, as does IHG.)
sdsearch is offline