2012 — 600,000+ records (2008–2010 incidents)
Data compromised
Payment cards, financial info
Technical writeup
Jun 2012. FTC sued Wyndham for failing to protect customer data. Three breaches (2008–2010) compromised 600k+ accounts. Russian hackers stole financial info; $10.6M+ fraudulent charges. Wyndham stored cards in plain text, used default admin passwords, lacked firewalls. First FTC suit for inadequate data security. Settled 2015 with 20-year compliance order.
Root cause
Inadequate security; plaintext card storage; default credentials.