Three appears to have made a blunder , after customers logging into the British mobile phone company ’ s website found themselves looking at other customers ’ accounts - including the names , addresses , call histories and data usage of complete strangers . The Guardian describes how one customer , Andy Fidler , found the Three app on his mobile phone wasn ’ t working - and so he decided to log into Three ’ s website instead : “ I managed to successfully download a complete stranger ’ s phone bill . All I did was click on the link to bring up my bill . It included the name , address , how much they were paying , the phone numbers they had rung and texted. ” Fortunately , bank details were not accessible . He wasn ’ t the only one to stumble across the problem - which appears to be more of a technical screw-up than a malicious hack - as posts on Three ’ s official Facebook page reveal . A Three spokesperson says that they are aware of the problem and are investigating . But one has to wonder how many customers could have been put at risk of having their private data exposed Attack.Databreach , and for how long the problem has been present . The Information Commissioner ’ s Office has confirmed it will be “ looking into this potential incident involving Three ” , and if they find the company has been sloppy with its securing customer details it is unlikely to be impressed . Last November , in what appears to be an unconnected incident , Three revealed that its upgrade database had been breached Attack.Databreach , exposing Attack.Databreach the names , phone numbers , addresses and dates of birth of over 130,000 customers .

In what ’ s becoming a familiar refrain to guests , InterContinental Hotels Group , said late last week that payment card systems at more than 1,000 of its hotels had been breached Attack.Databreach . It ’ s the second breach that IHG , a multinational hotel conglomerate that counts Holiday Inn and Crowne Plaza among its chains , has disclosed this year . The company acknowledged in February that a credit card breach Attack.Databreach affected 12 of its hotels and restaurants . In a notice published to its site on Friday the company said a second breach Attack.Databreach occurred at select hotels between Sept. 29 and Dec. 29 last year . IHG says there ’ s no evidence payment card data was accessed Attack.Databreach after that point but can ’ t confirm the malware was eradicated until two to three months later , in February/March 2017 , when it began its investigation around the breach . Like most forms of payment card malware these days , IHG said the variant on their system siphoned track data Attack.Databreach – customers ’ card number , expiration date , and internal verification code – from the magnetic strip of cards as they were routed through affected hotel servers . The hotelier said the first breach Attack.Databreach also stemmed from malware found on servers used to process credit cards , but from August to December 2016 . That breach Attack.Databreach affected hotels , along with bars and restaurants at hotels , such as Michael Jordan ’ s Steak House and Bar at InterContinental Chicago and the Copper Lounge at Intercontinental Los Angeles . IHG didn ’ t state exactly how many properties were affected by the second breach Attack.Databreach but that customers can use a lookup tool the company has posted to its site to search for hotels in select states and cities . IHG gives a timeline for each property and says hotels listed on the tool “ may have been affected. ” A cursory review of hotels in the lookup tool suggests far more than a dozen – more than a thousand – hotels , were affected by the malware . IHG says that since the investigation is ongoing the tool may may be updated periodically . Some properties , for a reason not disclosed , elected to not participate in the investigation , IHG said . While the company operates 5,000 hotels worldwide this most recent breach Attack.Databreach affects mostly U.S.-based chains . One hotel in Puerto Rico , a Holiday Inn Express in San Juan , is the only non-U.S. property that hit by malware this time around , IHG claims . The company said it began implementing a point-to-point encryption payment solution – technology that can reportedly prevent malware from scouring systems for payment card data last fall . The hotels that were hit by this particular strain of malware had not yet implemented the encryption technology , IHG claims . The news comes as an IHG subsidiary , boutique hotel chain Kimpton , is fighting a class action court case that alleges the company failed to take adequate and reasonable measures to protect guests payment card data . The chain said it was investigating a rash of unauthorized charges on cards used at its locations last summer . It eventually confirmed a breach Attack.Databreach in late August that involved cards used from Feb. 16 , 2016 and July 7 , 2016 at nearly all of its restaurants and hotels .