Should I be compensated by a luxury hotel?

philip1427

I stay in the same upmarket hotel in London every time I need to be in the capital. Upon browsing their website there was a little tiny notice at the top detailing a cyber security breach.

Apparently an unknown third party infiltrated their central reservation and guest relation database having access to personal information including email addresses, home addresses alongside financial information such as CC details. As a precautionary measure I have cancelled the card I which I used to make reservations.

I realise cyberattacks are part of the modern world but I am furious that the hotel did not contact its guests to inform them their identities could have been stolen!

As a consequence I have written a email to the hotel explaining all this. However I wonder if I am entitled to compensation?

philip1427

In my eyes I have had a loss of time to speak to banks and merchants to change payment methods for recurring payments as well as loss of privacy.

Oakdene

Loss of time? Whats your hourly rate?

Good grief is that what we have come to in this country now, you haven't lost out financially so no compensation due.

As for not being contacted by the hotel, do you really expect them to contact every person who has ever stayed there?

tykesi

Oakdene wrote: »

Loss of time? Whats your hourly rate?

Good grief is that what we have come to in this country now, you haven't lost out financially so no compensation due.

As for not being contacted by the hotel, do you really expect them to contact every person who has ever stayed there?

Unfortunately so, any mistake by any company or service now is immediately seen as a money making opportunity by many, it's shameful.

Fosterdog

philip1427 wrote: »

In my eyes I have had a loss of time to speak to banks and merchants to change payment methods for recurring payments as well as loss of privacy.

At this stage any lost time is of your own doing. If your details had actually been compromised and used in any way then I would expect them to offer a goodwill gesture but you have chosen to jump the gun and waste your own time cancelling cards and dealing with banks off your own back. Your details may not have even been compromised, even if they were the hackers won't necessarily use the details of everyone they have details for.

You've had no loss of privacy.

photome

How much money do you want?

This compo culture is unbelievable

Potbellypig

I deserve some compensation for the time wasted reading this thread.

PDC

They should have certainly notified you if all the information was taken as per your email including payment and credit card details. It would be unusual for a business' to keep such information together in a usable form, not unheard of but certainy irresponsible.

If the infomation lost was encrypted then they do not legally have to inform you, but if it wasn't then yes, they should have.

As to whether you get compensation, who knows. But I would certainly let them know that you are concerned at not being informed.

You could also contact the ICO, Information Commissioners Office, if you aren't happy with the handling of this.

naedanger

philip1427 wrote: »

I stay in the same upmarket hotel in London every time I need to be in the capital. Upon browsing their website there was a little tiny notice at the top detailing a cyber security breach.

Apparently an unknown third party infiltrated their central reservation and guest relation database having access to personal information including email addresses, home addresses alongside financial information such as CC details. As a precautionary measure I have cancelled the card I which I used to make reservations.

I realise cyberattacks are part of the modern world but I am furious that the hotel did not contact its guests to inform them their identities could have been stolen!

As a consequence I have written a email to the hotel explaining all this. However I wonder if I am entitled to compensation?

I suggest you write to the hotel seeking an explanation of whether your data may have been included in the compromise, and if so why they have not written to you. (A company is obliged to notify its customers of certain security breaches.)

Depending on their response you may wish to take the matter further.

The following is worth a read:

https://ico.org.uk/for-organisations/guide-to-pecr/communications-networks-and-services/security-breaches/

powerful_Rogue

Had a letter from 3 mobile last year, similar situation to yours.

The provided everyone affected with a 12 month Noddle Alerts membership. Basically alerts you to all activity using your details (credit applications/searches etc).

Was more then happy with this. At no point did the thought of 'compensation' ever cross my mind.

LadyDee

photome wrote: »

How much money do you want?

This compo culture is unbelievable

And dare one say this site has encouraged such a culture?