Go Back  FlyerTalk Forums > Miles&Points > Hotels and Places to Stay > Hilton | Hilton Honors
Reload this Page >

Hilton Honors Website Security - Accounts hacked Oct 2014

Hilton Honors Website Security - Accounts hacked Oct 2014

Old Dec 15, 17, 1:58 am
  #286  
 
Join Date: Jun 2013
Location: MEL
Programs: QF, FI, BA, HHonors & Le Club Accorhotels
Posts: 397
Aeroplan is the FF for Air Canada
garethlewis is offline  
Old Dec 15, 17, 9:25 am
  #287  
Hilton Contributor Badge
 
Join Date: Nov 2008
Location: Snohomish, WA
Programs: AS MVP Gold, HHonors Diamond
Posts: 2,559
Yes, it's happened before. Many people have posted here in the past with the same general story.

Neil
missamo80 is offline  
Old Dec 15, 17, 10:50 am
  #288  
 
Join Date: Aug 2013
Location: NYC
Programs: HH DFL, Hyatt Globalist, AA CK 3MM+, United 1K, National EE, Del Friscos Gold, Uber Diamond
Posts: 38
Originally Posted by missamo80 View Post
Yes, it's happened before. Many people have posted here in the past with the same general story.

Neil
Thanks. Surprising Hilton cannot fix their holes. It looked automated as it was done so fast. Hopefully they enhance their security.
MisplacedYankee is offline  
Old Dec 15, 17, 1:17 pm
  #289  
FlyerTalk Evangelist
 
Join Date: Aug 2007
Location: SEA, but up and down the coast a lot
Programs: OneSky Alliance Elite+ with Zirconium and oak leaf cluster, Braniff Unobtainium
Posts: 17,679
Hilton Honors Website Security - Accounts hacked Oct 2014

Hilton account hacked and points transferred to points.com
eponymous_coward is offline  
Old Mar 22, 18, 8:54 pm
  #290  
FlyerTalk Evangelist
 
Join Date: Jun 2004
Location: MSP
Programs: DL PM, MM, NR; HH Diamond, Bonvoy Titanium, Hyatt Explorist, others
Posts: 11,608
One advantage of having AwardWallet is that they notify me whenever a point balance changes.

I can't see why people think they can get away with making award reservations; why doesn't Hilton play along and arrest them when they show up?
sethb is offline  
Old Mar 22, 18, 9:01 pm
  #291  
 
Join Date: Nov 2013
Location: NUQ
Programs: UA Gold, AS MVP
Posts: 4,032
I received this email this morning.

POINTS REDEMPTION ACTIVITY NOTICE

Dear [xxxx],

Thank you for your loyalty to Hilton! This is a courtesy message to confirm the point redemption activity on your Hilton Honors account. You may verify the specific activity and any changes made during the transaction by accessing your account on-line via Hilton Honors.

Your privacy is important to us, if you did not authorize the point redemption on your account or any changes during the transaction, please contact Hilton Honors at 1-800-446-6677 to speak with a customer service representative.

Thank you,
Hilton Honors



Despite this, I logged in and saw no activity on my account.

My account was previously compromised in the fall (around August 2017).
davie355 is offline  
Old Mar 22, 18, 9:02 pm
  #292  
 
Join Date: Mar 2015
Posts: 1,989
Originally Posted by sethb View Post
One advantage of having AwardWallet is that they notify me whenever a point balance changes.

I can't see why people think they can get away with making award reservations; why doesn't Hilton play along and arrest them when they show up?
The guests showing up may (likely) be victims as well and honestly thought they had proper reservations after paying for the booking online in advance.
PayItForward is offline  
Old Mar 22, 18, 9:46 pm
  #293  
FlyerTalk Evangelist
 
Join Date: Jun 2004
Location: MSP
Programs: DL PM, MM, NR; HH Diamond, Bonvoy Titanium, Hyatt Explorist, others
Posts: 11,608
Originally Posted by PayItForward View Post
The guests showing up may (likely) be victims as well and honestly thought they had proper reservations after paying for the booking online in advance.
Then it can be determined who they paid and the money reclaimed (and the recipients arrested).
sethb is offline  
Old Mar 24, 18, 10:45 am
  #294  
FlyerTalk Evangelist
 
Join Date: Nov 2003
Location: South Florida
Programs: AA LTG (EXP), Hilton Silver (Dia), Marriott LTP (PP), SPG LTG (P) > MPG LTPP
Posts: 11,329
Originally Posted by sethb View Post
Then it can be determined who they paid and the money reclaimed (and the recipients arrested).
Maybe you need to watch a bit more TV movies... If someone is going to stealing points and selling them, they won't be using their real identity when dealing with the marks. Thieves put a lot of effort into hiding and making sure they are protected without regard for what happens to their victims.
RogerD408 is offline  
Old Mar 24, 18, 8:59 pm
  #295  
FlyerTalk Evangelist
 
Join Date: Jun 2004
Location: MSP
Programs: DL PM, MM, NR; HH Diamond, Bonvoy Titanium, Hyatt Explorist, others
Posts: 11,608
Originally Posted by RogerD408 View Post
Maybe you need to watch a bit more TV movies... If someone is going to stealing points and selling them, they won't be using their real identity when dealing with the marks. Thieves put a lot of effort into hiding and making sure they are protected without regard for what happens to their victims.
How did the sucker pay? Anyone who pays cash to a stranger for a hotel reservation deserves what he gets.
sethb is offline  
Old Mar 25, 18, 7:03 am
  #296  
FlyerTalk Evangelist
 
Join Date: Nov 2003
Location: South Florida
Programs: AA LTG (EXP), Hilton Silver (Dia), Marriott LTP (PP), SPG LTG (P) > MPG LTPP
Posts: 11,329
Originally Posted by sethb View Post
How did the sucker pay? Anyone who pays cash to a stranger for a hotel reservation deserves what he gets.
There are tons of ways to complete a transaction without paying cash. Between CC, Debit Cards, Zelle, PayPal, etc. it's not hard to open accounts and bail when things get hot. This is one (of many) reasons why cardholder and merchant fees are so high. And even if the phony broker loses the last few transactions they are still ahead and the victims are out lots of money.
RogerD408 is offline  
Old Mar 26, 18, 5:18 pm
  #297  
FlyerTalk Evangelist
 
Join Date: Jun 2004
Location: MSP
Programs: DL PM, MM, NR; HH Diamond, Bonvoy Titanium, Hyatt Explorist, others
Posts: 11,608
Most of those ways leave a trace that can be followed, if law enforcement is interested.
sethb is offline  
Old Mar 26, 18, 6:09 pm
  #298  
FlyerTalk Evangelist
 
Join Date: Nov 2003
Location: South Florida
Programs: AA LTG (EXP), Hilton Silver (Dia), Marriott LTP (PP), SPG LTG (P) > MPG LTPP
Posts: 11,329
Originally Posted by sethb View Post
Most of those ways leave a trace that can be followed, if law enforcement is interested.
Ding ding ding! We have a winner. Very good chance the perp is in a different jurisdiction, if not a different country and hiding behind a couple of different identities. Unless you can identify many local victims I wouldn't expect much traction.

I know someone that commited extensive fraud and the LEOs weren't interested in more cases since they didn't expect them to add any more to the sentencing for the case.
RogerD408 is offline  
Old Apr 21, 18, 6:47 am
  #299  
 
Join Date: Nov 2010
Posts: 2
My account was hacked and 21000 points taken out for a stay in China . Never travelled to China in my life. What a mess I believe it is someone within Hilton stealing customer accounts and selling to third party.
rajatbathla is offline  
Old Apr 21, 18, 7:08 am
  #300  
 
Join Date: Nov 2010
Posts: 2
Originally Posted by TonyG5003 View Post
A head's up...

I had fraudulent activity on my account overnight - siphoning about 30,000 points in 4 separate transfers. (Of course, I've reported this to Hilton.)

Mid-way thru the night, the fraud also involved an invitation to "Pool" my account with another - it said that I initiated the pooling "invite."

What's VERY interesting, is this activity occurred just barely 24 hours after I called Hilton to open a formal complaint about a specific Hampton property - and about a week after posting negative, but accurate and "constructive" reviews on Trip Advisor, Yelp, and Google.

I've not called Hilton to formally file a complaint in over 10 years - and 24 hours later, I have fraud? Strange coincidence - or rogue employee/manager?

Anyway... Hilton's terms say they're not responsible for replacing the points. However, the agent said it takes 10-14 days for the investigation to occur, and they will replace the points if fraudulent activity occurred.

I cannot find ANY information about rewards program fraud - other than the previous Hilton PIN number fraud a few years ago.

BEWARE
Exactly same thing happened with me. Points were stolen after complaining to diamond club and property manager.
rajatbathla is offline  

Thread Tools
Search this Thread
Search Engine: