A settlement has been reached between New York Attorney General Eric Schneiderman and Donald Trump over a series of breaches at his hotel chain.

The hotel chain suffered a breach that put as risk customers credit card numbers that affected 70,000. A forensic investigation showed that the hotel chain, Trump International Hotels Management, aka Trump Hotel Collection (THC), had suffered several breaches to its servers that allowed hackers to steal credit card numbers. Several banks also reported fraudulent card transactions.

The fine is because the hotel chain failed to inform customers of the breach in a timely manner. The failure to inform the public is a violation of the state's General Business Law § 899-aa, requiring notice to consumers “in the most expedient time possible and without unreasonable delay.”

In addition to the fine, the hotels are required to strengthen employee training, risk assessments and testing of "key controls, systems, and procedures."

Source: SCMagazine