Choice Hotels has launched an investigation and will evaluate its vendor relationships after the personal data of 700,000 customers, including names, phone numbers and email addresses, was stolen by hackers. The information was exposed for four days on an unsecured MongoDB database. Initially discovered on 30 June by BinaryEdge, it was only when security researcher Bob Diachenko sent a second notification to Choice Hotels that the database was secured on 2 July. Most of the 700,000 compromised records were in a database of 2.4 million records labeled "privacy log" and located in the same MongoDB instance. “While we are investigating this incident, our primary focus is protecting customer information,” said Brian Kelly, CEO of Choice.io.
Choice Hotels has launched an investigation and will evaluate its vendor relationships after the personal data of 700,000 customers, including names, phone numbers and email addresses, was stolen by hackers. The information was exposed for four days on an unsecured MongoDB database. Initially discovered on 30 June by BinaryEdge, it was only when security researcher Bob Diachenko sent a second notification to Choice Hotels that the database was secured on 2 July. “While we are investigating this incident, our primary focus is protecting customer information,” said Brian Kelly, CEO of Choice.io.