More bad news from the online crime front over the weekend, as UK business software group Sage reports a breach that may have compromised the bank account details of employees at 230 UK companies, and HEI Hotels group in the US admits to a POS malware infection that filched payment card details from tens of thousands of customer transactions.
Shares in Sage slipped 3.9% after the business finance group warned over 200 of its business clients that employee salary information and bank account details may have been compromised in the hack.
“We are investigating unauthorised access to customer information using an internal login,” Sage said on Saturday. “We cannot comment further whilst we work with the authorities to investigate — but our customers remain our first priority and we are speaking directly with those affected.”
Elsewhere, HEI Hotels says that a POS malware infection afflicted up to 20 US hotels bearing the Starwood, Westin, Marriott International, Hyatt and InterContinental brands. The malware lurked within POS systems at the chain's restaurants, bars, spas, shops and other facilities for a over a year.
Forensic investigators appointed in June when the brach was discovered say that hackers might have stolen customer names, account numbers, payment card expiration dates and verification codes.