Maximise your Avios, air miles and hotel points

Forums Hotel loyalty schemes IHG One Rewards IHG account hacked

  • ZW 34 posts

    I got an email saying my IHG contact info was changed. I logged on my account and found that a hotel was booked using my points. After a quick call to IHG’s fraud team, the booking was cancelled and the points were refunded.

    I remembered that IHG had some data leak issues last summer. Hope this is just a one-off event.

    BA Flyer IHG Stayer 2,376 posts

    I think someone mentioned it on chat here ww or maybe flyer talk IHG board.

    I just changed my IHG as I have been working through updating a number of my accounts to make the passwords stronger and non duplicative and deleting some accounts altogether.

    NorthernLass 8,472 posts

    Which contact details had changed, and which hotel had been booked? I always wonder how these people intend to get around the requirement to show ID in a lot of countries.

    Peter K 619 posts

    I had a bank account hacked a few years ago (it had a unique password, plus a secondary password code) and the only thing they changed was the phone number. That way they could intercept the messages to allow through transactions.

    I got a load of spam text messages from random places, with one being the genuine notification from my bank of the account change. I immediately rang them and they blocked my account within a couple of minutes before they were able to move out any money.

    ZW 34 posts

    Which contact details had changed, and which hotel had been booked? I always wonder how these people intend to get around the requirement to show ID in a lot of countries.

    Email and phone number. Points were used to book a hotel in Washington DC. I wonder why the hacker didn’t change my password, maybe they haven’t had enough time to do it as I logged on as soon as I received the “your email addresses has been changed email” from IHG.

    NorthernLass 8,472 posts

    I don’t know if US citizens have to show ID at check in but we always have on US stays. I had an issue with Hilton one year as the booking was in my married name but my passport is in my maiden/professional name, so now I always book in my maiden name or in OH’s name. I don’t know if you can add another guest on an IHG booking (like you actually can with Hilton!)

    Pangolin 118 posts

    I also got two separate emails on Feb 6 saying that my email and phone number had been changed.

    In a panic I logged into my account immediately but my email and phone were the same as before and no points had been drained by making bookings.

    I informed IHG and they said that I had updated my communication preferences (ie what updates you subscribe to) but nothing else, even though I don’t recall making any changes.
    Interestingly, it happened on the same day I checked into HIX Dubai Airport for a 1-night stay.

    I’m still a little unsure about what’s going on and I’ve now updated my email and phone to a different one as a precautionary measure.

    However, it’s worrying that someone would be able to make a booking with just your email/phone and not your password – especially if your password was never changed by an emailed reset request.

    Now I’m monitoring my account status at least once a day.

  • You must be logged in to reply to this topic.

The UK's biggest frequent flyer website uses cookies, which you can block via your browser settings. Continuing implies your consent to this policy. Our privacy policy is here.