[ . . . ] The most likely place for card numbers (and the numbers on the back) to be stolen is in person, at restaurants and stores. [ . . . ]
To that list, you can add hotels. By coincidence, there was an article on this in yesterday's New York Times (
http://www.nytimes.com/2010/07/06/b...r=1&scp=1&sq=hotel "credit card" fraud&st=cse )
Two quotes from the article:
"A study released this year by SpiderLabs, a part of the data-security consulting company Trustwave, found that 38 percent of the credit card hacking cases last year involved the hotel industry. The sector was well ahead of the financial services industry (19 percent), retailing (14.2 percent), and restaurants and bars (13 percent)."
"At hotels with inadequate data security, “the greatest amount of credit card information can be obtained using the most simplified methods,” said Anthony C. Roman, a private security investigator with extensive experience in the hotel industry. "It doesn’t require brilliance on the part of the hacker,” Mr. Roman said. “Most of the chronic security breaches in the hotel industry are the result of a failure to equip, or to properly store or transmit, this kind of data, and that starts with the point-of-sale credit card swiping systems.”
What this means in practice is that even if you try to be extra careful with who you give your credit card data to, this still won't necessarily protect you. You show up at the desk of a well-known hotel chain as you have done so often before, and they take an imprint of your card. Unfortunately, the sleepy desk clerk leaves that imprint lying around, and someone else gets the opportunity to copy the data.
End result: by the time you get home from your trip and can check your accounts, someone has run up your tab by several hundreds or even thousands of dollars.
