Millions of Hilton HHonors points have been stolen and are being sold or exchanged for gift cards or other things on the Internet.
In a forum that was discovered, a user claims to have found a very simple script that can brute-force Hilton cards with a four-digit PIN. Although the company has not yet officially acknowledged this with any announcement, some customers have reported that they have been compensated for lost points by reporting it to Hilton.
On the Internet now, this seems to have been happening for about 3 months. In fact, one user reports that he has sold 833,000 points for $20 in Bitcoins. The value of the point has been estimated at half a cent in dollars and the points can be redeemed at expensive hotels with prices ranging from $5500 to $50,000, per night.
In America, shoppers with 50,000 points could get a $100 gift certificate to major chain stores. In Australia, with 322,660 points, someone could get a $500 Hi-Fi.
Hilton, for its part, implemented a captcha system for cardholders a month ago, which of course cannot prevent a possible brute-force attack.
