The Wyndham Worldwide hotel chain has agreed to settle charges brought
by the US Federal Trade Commission (FTC) that the company did not employ
adequate security to protect customer data. Wyndham challenged the FTC's
authority to impose penalties, but a federal appeals court sided with
the FTC earlier this year. The settlement requires Wyndham to "establish
a comprehensive information security program designed to protect
cardholder data," undergo audits, and take other precautions.
http://thehill.com/policy/cybersecurity/262635-breached-hotel-chain-settles-with-ftc-in-landmark-casegood too see some people being smacked for not protecting data.
