<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3354" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> DAIL, WILLARD A
<BR><B>Sent:</B> Tuesday, August 26, 2008 3:02 PM<BR><B>To:</B>
dataloss@attrition.org<BR><B>Subject:</B> RE: [Dataloss] Best Western
Response<BR><BR></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=282235519-26082008>Good
point. The hospitality industry is one where franchisees or local owners
participate in branding, so any given location may or may not be company
owned.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=282235519-26082008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=282235519-26082008></SPAN></FONT> </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B>
dataloss-bounces@attrition.org [mailto:dataloss-bounces@attrition.org] <B>On
Behalf Of </B>JAMES RITCHIE<BR><B>Sent:</B> Tuesday, August 26, 2008 2:41
PM<BR><B>To:</B> Harris, Michael C.; dataloss@attrition.org<BR><B>Cc:</B>
macwheel99@wowway.com<BR><B>Subject:</B> Re: [Dataloss] Best Western
Response<BR><BR></FONT></DIV>
<DIV>Loophole that is found.<BR><BR>If each local hotel gains their own
merchant ID, processes the transaction through a payment gateway that is not
the corporate headquarters, then their level will be determined on that
merchant ID, not the aggregate of all the hotels.<BR><BR>If each hotel
processes through corporate headquarters (now becomes the gateway) to the
payment gateway, then the aggregate of all hotels would be combined into
one. <BR><BR>I have seen where each location was forced to get their own
merchant ID and payment gateway to keep the transactions down, thus keeping
the cost of audits down.<BR>
<DIV> </DIV>James Ritchie<BR>http://www.linkedin.com/pub/1/b89/433<BR>
<DIV>
<DIV> </DIV></DIV></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>
<table><tr><td bgcolor=#ffffff><font color=#000000>This message and any files transmitted with it is intended solely for the designated recipient and may contain privileged, proprietary or otherwise private information. Unauthorized use, copying or distribution of this e-mail, in whole or in part, is strictly prohibited. If you have received it in error, please notify the sender immediately and delete the original and any attachments.<br>
</font></td></tr></table>