Shanghai arrests a man for customer data leak at Accor partner

Vastavam web: Shanghai police have arrested a man in connection with a data leak at NASDAQ-listed Chinese hotelier Huazhu Group after the suspect failed to sell the information online. The 30-year-old suspect had hacked and stolen user data from hotels under the Huazhu Group and tried to sell it on overseas websites, the police said in a statement late Wednesday. Huazhu, one of China’s biggest hoteliers and the local partner of France-based AccorHotels, had alerted the police to reports in August that the company’s internal data was being sold online.

The potentially-leaked data included guest membership information, personal IDs, check-in records, guest names, mobile numbers and emails. Shanghai police said the case is under further investigation. Huazhu operates more than 3,000 hotels in over 370 cities in China, including the AccorHotels brands, Ibis and Mercure. The sale of personal information is common in China, which last year implemented a controversial cybersecurity law that requires services to store user data in China and receive approval from users before sharing their details. Before Huazhu formed a long-term alliance with Accor in 2014 to help the French hotel group develop the Chinese market, it experienced another user data leak.