Sadly, until IHG decides that fixing their fundamentally broken internet security policies is a bigger priority than playing around with their corporate logo, this kind of thing will happen again and again.

The only thing people can do in the meantime is to watch their accounts like a hawk (I check my account status every day, just like my bank accounts).

At least you managed to get the hacker turfed out of the hotel.