The Marriott hotel hack is the latest in an alarming series of data breaches, exposing the personal data of 500 million customers. Given the size of the breach, the quality of the data revealed and the number of years it went undetected, the repercussions are bound to impact the fraud landscape in 2019 and beyond.
In the aftermath of the Marriott breach, there will likely be an increase in fraud attack rates. Bad actors will leverage the leaked information to take advantage of e-commerce retailers and consumers by exploiting the available data via account takeovers, or ATO. ATO occurs when criminals hijack personal details (like those exposed in the Marriott breach), log in to an online account and masquerade as a returning customer to steal goods or additional data.
Marriott International Inc. signage is displayed in the lobby of the company's headquarters in Bethesda, Maryland, U.S., on Wednesday, June 1, 2016. With the closing of a merger deal between Marriott and Starwood Hotels & Resorts Worldwide Inc., expected midyear, Marriott would surpass Hilton Worldwide Holdings Inc. to become the biggest hotel company, with about 1.1 million rooms in 5,700 properties. Photographer: Andrew Harrer/Bloomberg
Andrew Harrer/Bloomberg
During the third quarter of 2017, there was a 53% spike in ATO, likely influenced by the Equifax breach, reinforcing the need for online merchants like hospitality companies to prevent these types of attacks, especially in the wake of a large-scale hack.
Loyalty program fraud is another concern for merchants following recent hacks. For fraudsters, loyalty points are essentially free money. Once a criminal has access to an account through ATO, they can easily steal and monetize a customer’s loyalty accounts. These accounts are especially valuable to the fraudster as they can often go unnoticed in their attacks, since the average shopper doesn’t systematically check their reward account balances. Beyond the immediate loss, loyalty program fraud can ruin customer relationships and deteriorate brand trust.
Further, data stolen in the Marriott breach may be used by bad actors to commit other large-scale attacks in the future, putting all online merchants at risk, regardless of industry. For instance, hackers recently accessed an undisclosed number of Dunkin’ DD Perks rewards accounts, using the data stolen in other companies’ security breaches. Given the scale and quality of the data exposed in the Marriott breach, fraudsters now have an immense amount of information that can potentially be used in future breaches.
Data breaches show no signs of abating, so online merchants must take precautions to protect their valued customers and their revenue from fraud, without disrupting the customer experience.
To do so effectively, merchants must look for fraud prevention partners that leverage machine learning and AI to stop fraud at every touchpoint along the customer journey (such as account creation and the redemption of loyalty points), instead of just focusing on the point of checkout.
A federal judge in Texas dismissed the Consumer Financial Protection Bureau's medical debt rule and prohibited states from passing their own laws prohibiting medical debt on credit reports.
The nation's largest bank is planning to implement fees for access to data that has traditionally been provided free of charge. Data aggregators and fintechs accused JPMorgan of exploiting regulatory uncertainty and raising prices for consumers.
Dr. Mark Calabria takes on the additional role of chief statistician of the United States; retired Ally Bank executive Diane Morais has joined First Citizens Bancshares' board of directors; MainStreet Bank has promoted Alex Vari to chief financial officer; and more in this week's banking news roundup.
The buyer said its $70 million cash-and-stock deal for Farmers State Bank will boost its presence in the northeast section of Ohio, and provide plenty of low-cost deposits
Historically high interest rates and falling late-payment rates suggest that credit card issuers are tightening their underwriting standards amid economic uncertainty.
