The Star Tribune reports that hackers stole approximately $35,000 in Club Carlson Gold Points (incentive awards earned from hotel stays and food and beverage purchases) from about 650 customers of the Carlson Rezidor Hotel Group.
The company discovered the breach about two weeks ago during an investigation into suspicious activity in Club Carlson accounts, including password changes, e-mail address changes, and conversions of Gold Points to PayPal credit and gift cards.
The 650 affected customers, a tiny portion of the total Club Carlson membership of 12 million, were notified by e-mail last week and asked to change their passwords. All stolen Gold Points will be replaced by the company.
While the affected customer accounts didn’t hold financial information, they did store phone numbers, e-mail addresses and street addresses.
Carlson Rezidor senior vice president of customer engagement Rachael Marret told the Star Tribune that phone numbers have now been deleted from all customer accounts.
Brands operated by Carlson Rezidor include Radisson, Radisson Blu, Park Plaza, Park Inn, and Country Inns & Suites.