Hackers are trying to steal your vacation. Here’s how to stop them

steal your vacation

Hackers are trying to steal your vacation. They’re coming after your personal data, your credit card information and your loyalty points.

Worst of all, they might already have them.

Consider what happened to Jill Frankfort, a teacher from Boston who recently lost 150,000 American Airlines frequent-flyer miles.

She didn’t find out about the break-in until months after the crime, when she tried to redeem her miles for an international trip. By then, the miles were long gone and the airline couldn’t help her.

“Travelers are often in a hurry, distracted or on autopilot while traversing public places,” says Mark Ruchie, the chief information security officer for Entrust Datacard. “They don’t notice when unusual activity occurs on their accounts – making them easy targets for hackers.”

Not only that, but the methods hackers use to commit their crimes have evolved as well. Advanced technology and tools that used to be exclusive to governments are now available to the bad guys. Danger is everywhere.

Your miles are on the dark net

For Frankfort, the discovery of her missing miles was devastating. She’d worked hard to earn them, going out of her way to give her business to American Airlines.

“There were transactions for tickets that I did not authorize,” she recalls, including business-class tickets from New Delhi to Doha, Qatar. “I think it’s important for people to know that airlines do not insure frequent-flyer miles from fraudulent usage as credit card companies do with fraudulent charges.”

American said it wouldn’t help her because the transactions had happened six months earlier but restored 25,000 miles as a goodwill gesture.

“The black market for frequent-flyer accounts is consistently growing,” says Justin Lavelle, a director for BeenVerified, an online background check platform. He says at least half a dozen online markets have listings created by criminals who have stolen frequent-flyer miles. They then try to resell the miles. It’s often difficult to detect the crime, since many folks don’t check their accounts that often, and the theft may go undetected for weeks or months.

Experts say you should change your passwords often and consider using a service like AwardWallet, which allows you to track all of your loyalty programs. Then again, you could just remove the target from your back entirely. How? Refuse to participate in any loyalty program and make decisions based on price and customer service, instead of how many points you can collect.

Don’t want someone to steal your vacation? Stay off public Wi-Fi

Another way hackers steal your vacation is by stealing your identity when you log on to a public Wi-Fi network at an airport or hotel.

“Cybercriminals can create a rough copy of your online presence to open up accounts in your name, pretend to be you in online transactions or even masquerade as you on social media to your friends, family and colleagues,” says Mike Tanenbaum, head of Chubb Cyber North America.

The result: At a minimum, a lot of your personal data could be compromised, which can take a while to untangle. But at worst, you could lose money.

Tanenbaum recommends using a virtual private network for online transactions, which provides enhanced security while traveling.

“Avoid conducting banking transactions or accessing your personal financial accounts while traveling, and wait until you get home to complete these types of activities,” he says. If you think your identity has been compromised, place an initial fraud alert on your file with one of the three credit bureaus – Experian, Equifax or TransUnion – and change all of your passwords and PINs. Report your identity theft to authorities.

They may already have your personal information

Most unsettling to travelers is the real possibility that their credit card numbers or passwords have already fallen into the wrong hands, because of numerous data breaches. In other words, you don’t have to worry about someone stealing your vacation — it’s already been stolen.

David Bryan recalls a transaction in a seafood restaurant on a recent visit to Brazil. The business rejected both of his credit cards. Finally, he offered his debit card and typed his PIN, successfully paying for his ceviche.

Two days later, Bryan’s bank notified him of potentially fraudulent activity on his debit card. “I called the bank, and they asked me if I withdrew money from an ATM in Brazil. I told them no, I’m not even in the country anymore,” he says.

Fortunately, the bank canceled his debit card and reversed the charges.

“Thankfully, there were no lasting issues for me. In hindsight, I knew something was amiss at the restaurant, and that must have been where my information was stolen,” he says.

And if it happened to him, it can happen to anyone. Bryan is the global technology lead for IBM’s X-Force Red, which provides security testing to corporate clients.

His advice: Don’t use your debit card at stores or restaurants that may not have the security to protect their point-of-sale systems. If you use an ATM, select one inside a bank branch or inside an airport, where the chance of tampering or skimmers on the ATM is reduced. And stay off any public computers.

Hackers are coming for you when you travel. But they don’t have to get you. Check your loyalty accounts frequently, only use safe Wi-Fi and mind your debit card usage, and you can avoid the worst of it.

More tips for avoiding hackers — and having someone steal your vacation

• Back up, update and encrypt. “Before you leave, make sure you back up all devices and data,” says Joseph Carson, chief security scientist at Thycotic, a Washington D.C., security services provider. “Double-check that all security updates are applied, and finally, check your security settings to ensure your sensitive data is encrypted.”

• Beware of new mobile apps before you leave. Before you go, you might be tempted to install a museum app, a language translation app or a local news app. But it may also be malicious and compromise your data, according to Chris Bogen, a Tulane University professor in its School of Professional Advancement Cybersecurity Management Program. “The risk here is no different than when you install apps on your phone at other times,” he adds.

• Mind the “evil maid.” That’s the industry term for a physical attack at your hotel. “When you leave your laptop out of your sight in a hotel bedroom, someone – the evil maid – can take advantage of that and either copy your laptop hard drive or infect it with malware for further exfiltration of information,” says Fausto Oliveira, a principal security architect at Acceptto, a Portland, Oregon-based provider of authentication services. The workaround? Encrypt your disk or never let your PC out of your sight.

Posted in On Travel Tagged , ,

Christopher Elliott is the founder of Elliott Advocacy, a 501(c)(3) nonprofit organization that empowers consumers to solve their problems and helps those who can’t. He’s the author of numerous books on consumer advocacy and writes weekly columns for King Features Syndicate, USA Today, and the Washington Post. If you have a consumer problem you can’t solve, contact him directly through his advocacy website. You can also follow him on Twitter, Facebook, and LinkedIn, or sign up for his daily newsletter.

Underwritten by

Elliott Advocacy is underwritten by Global Rescue

Global Rescue is the world’s leading provider of medical, security, evacuation and travel risk management services. Founded in 2004, Global Rescue has exclusive relationships with the Johns Hopkins Emergency Medicine Division of Special Operations and Elite Medical Group. Global Rescue provides best-in-class services that identify, monitor and respond to client medical and security crises. Learn more about Global Rescue.

Elliott Advocacy is underwritten by Generali Global Assistance

Generali Global Assistance has been a leading provider of travel insurance and other assistance services for more than 25 years. We offer a full suite of innovative, vertically integrated travel insurance and emergency services. Generali Global Assistance is part of The Europ Assistance (EA) Group, who pioneered the travel assistance industry in 1963 and continues to be the leader in providing real-time assistance anywhere in the world, delivering on our motto – You Live, We Care.

Elliott Advocacy is underwritten by Seven Corners

Seven Corners has helped customers all over the world with travel difficulties, big and small. As one of the few remaining privately owned travel insurance companies, Seven Corners provides insurance plans and 24/7 travel assistance services to more than a million people each year. Because we’re privately held, we can focus on the customer without the constraints that larger companies have. Visit Seven Corners to learn more.

Elliott Advocacy is underwritten by Sodexo North America

Sodexo North America Sodexo North America is part of a global, Fortune 500 company with a presence in 80 countries. Sodexo is a leading provider of integrated food, facilities management and other services that enhance organizational performance, contribute to local communities and improve quality of life for millions of customers in corporate, education, healthcare, senior living, sports and leisure, government and other environments daily. Learn more at Sodexoinsights.com.

Elliott Advocacy is underwritten by Travelex Insurance Services

Travelex Insurance Services is a leading travel insurance provider in the United States with over 55 years combined industry expertise of helping people dream, explore and travel with confidence. We offer comprehensive travel insurance plans with optional upgrades allowing travelers to customize the plans to fit their needs. Compare plans, get a quote and buy online at Travelexinsurance.com.

Elliott Advocacy is underwritten by Allianz Travel Insurance

The Allianz Travel Insurance company has built its reputation on partnering with agents all around the world to provide comprehensive travel insurance for their clients. Contact Allianz Travel Insurance for a comprehensive list of coverage.

Elliott Advocacy is underwritten by Chubb

Chubb is the world’s largest publicly traded property and casualty insurance company, and recognized as the premier provider of insurance for successful individuals and families in the U.S. and selected international markets, offering coverage for high-value automobile, homeowners, recreational marine/aviation, valuables and umbrella liability coverage. As an underwriting company, Chubb assesses, assumes and manages risk with insight and discipline, and combines the precision of craftsmanship with decades of experience to conceive, craft and deliver the best insurance coverage and services to individuals, families and business of all size.

Elliott Advocacy is underwritten by Fareportal

Fareportal’s portfolio of brands, which include  CheapOair and  OneTravel, are dedicated to helping customers enjoy their trip. Whether you want to call, click, or use one of our travel apps, one thing is clear: We make it easy to take it easy.

Elliott Advocacy is underwritten by Insuremyrentalcar.com

An independent provider of low cost CDW/LDW insurance for use with rental cars. Up to $100,000 cover with no deductible. Policies available on a per day, per trip or per year basis. Also works with overseas rentals. Try  Insuremyrentalcar.comnow.

Elliott Advocacy is underwritten by Mediacom Communications

The nation’s fifth-largest cable operator, serving the smaller cities and towns in the Midwest and Southern regions of the United States. We are a high-performance broadband, entertainment, and communications company that brings the power of modern technology and quality customer experience to life inside the connected home by combining ultra-fast gigabit speeds with personalized local and over-the-top entertainment choices that fit your lifestyle. Details at  Mediacomcable.com.

Elliott Advocacy is underwritten by Arch RoamRight

Arch RoamRight is one of the fastest growing, most-highly rated travel insurance companies in the United States. Travel advisors love working with us, and travelers feel protected with our trip cancellation and travel medical insurance coverage. We also make it easy to file a claim online with our fast, paperless claims website. Learn more about RoamRight travel insurance.

Elliott Advocacy is underwritten by VisitorsCoverage

VisitorsCoverage is one of the world’s most trusted providers of travel insurance for millions of global travelers in over 175 countries. Working with top-rated travel insurance partner providers, VisitorsCoverage’s award-winning search, compare and purchase technology simplifies the travel insurance process and finds the best deals for the coverage you need to explore the world with confidence. Get insurance for your next trip at VisitorsCoverage.

Elliott Advocacy is underwritten by MedjetAssist

Medjet is the premier global air-medical transport, travel security and crisis response membership program for travelers. With a MedjetAssist membership, if you become hospitalized more than 150 miles from home, we will get you from that unfamiliar hospital all the way home to the hospital you trust. All you ever pay is your membership fee. MedjetHorizon members add 24/7 personal security and crisis response benefits. Elliott.org readers enjoy discounted rates. Travel safer with  MedjetAssist.

Elliott Advocacy is underwritten by Southwest Airlines

The mission of Southwest Airlines is dedication to the highest quality of Customer Service delivered with a sense of warmth, friendliness, individual pride, and Company Spirit. We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth.

Elliott Advocacy is underwritten by TravelInsurance.com

TravelInsurance.com makes it fast and easy to compare and buy travel insurance online from top rated providers. Our unbiased comparison engine allows travelers to read reviews, compare pricing and benefits and buy the right policy with a price guarantee, every time. Compare and buy travel insurance now at  TravelInsurance.com.

Elliott Advocacy is underwritten by Squaremouth

Squaremouth helps travelers easily and instantly compare travel insurance policies from all major providers. Only companies that meet the strict requirements of Squaremouth’s Zero Complaint Guarantee are available on the website. Compare policies on  Squaremouth.com to save over 70 percent on your next purchase.

Elliott Advocacy is underwritten by Travel Leaders Group

Travel Leaders Group is transforming travel through its progressive approach toward each unique travel experience. Travel Leaders Group assists millions of travelers through its leisure, business and network travel operations under a variety of diversified divisions and brands including All Aboard Travel, Andrew Harper Travel, Colletts Travel, Corporate Travel Services, CruCon Cruise Outlet, Cruise Specialists, Nexion, Protravel International, SinglesCruise.com, Travel Leaders Corporate, Travel Leaders Network and Tzell Travel Group, and its merger with ALTOUR. With more than 7,000 agency locations and 52,000 travel advisors, Travel Leaders Group ranks as one of the industry’s largest retail travel agency companies.

Elliott Advocacy is underwritten by Travelers United

If you’ve been mistreated by the airlines, Travelers United is your voice in Washington. Join the #1 travel advocacy organization working with Congress to improve and protect travelers. Plus, get $400 of annual benefits you can use for travel for only $29/year. Add your voice to ours. Make travel better.  Join today.

Elliott Advocacy is underwritten by Generali Global Assistance

Generali Global Assistance has been a leading provider of travel insurance and other assistance services for more than 25 years. We offer a full suite of innovative, vertically integrated travel insurance and emergency services. Generali Global Assistance is part of The Europ Assistance (EA) Group, who pioneered the travel assistance industry in 1963 and continues to be the leader in providing real-time assistance anywhere in the world, delivering on our motto – You Live, We Care.

%d bloggers like this: