Travelodge "Fundamentally Failed" Woman Sexually Assaulted After Attacker Was Handed Her Room Key, Review Finds

An independent review has concluded that Travelodge "fundamentally failed" a woman who was sexually assaulted by a man who obtained a key to her hotel room, with the barrister leading the investigation finding that the chain's security policies were inadequate at the time of the attack.

Barrister Paul Greaney KC determined that Travelodge's security arrangements at its Maidenhead hotel in December 2022 were "not fit for the purpose of keeping guests safe." His findings, published this week, also revealed that the situation has not been fully resolved, with room intrusions reported at nearly one in ten Travelodge hotels during the summer of this year and no formal policy in place addressing violence against women and girls.

The review places responsibility squarely on Travelodge as an organisation rather than on individual employees. Greaney identified a troubling workplace culture in which unauthorised room entries had come to be regarded as "one of those things" — an attitude that allowed systemic security weaknesses to persist unchallenged.

The attack occurred when Kyran Smith approached the reception desk at the Maidenhead hotel and falsely claimed to be the woman's boyfriend. He was handed a room key less than three minutes after making that claim. The receptionist who provided the key had received no training whatsoever in key security procedures. Smith was subsequently jailed for seven-and-a-half years in January for the assault.

The victim's attempts to seek accountability from Travelodge were, according to the review, mishandled at multiple levels of the company. In January 2023, she sent an email of complaint addressed to chief executive Jo Boydell and other senior figures. The review found that this email was dealt with by Boydell's office without her knowledge and did not reach the chief executive's attention until March 2026 — more than three years after it was sent.

Compounding the failure, the woman's complaint was investigated by a manager who was himself criticised within that same complaint. The customer services team ultimately offered her a refund for the cost of her night's stay, which she understood to amount to approximately £30 — a response that many observers would regard as wholly inadequate given the severity of what had occurred.

The case only gained national prominence in March 2026, when the woman contacted the BBC, stating that her experience raised serious questions about room security across Travelodge's hotel network. Following that coverage, dozens of other people came forward to share their own experiences of strangers entering their rooms. Among them was a domestic abuse victim whose abuser was given a key to her room at a Travelodge in London — a case that illustrates how the security failings identified in Maidenhead were not isolated incidents.

The scale of the problem prompted political intervention. Then prime minister Sir Keir Starmer wrote to Boydell in March, urging her to "seriously engage" with the government on the issue of hotel security. Greaney was appointed to lead the independent review the following month, a decision that signalled the matter was being treated with the seriousness it warranted.

Boydell stepped down as chief executive in August 2026 following sustained criticism over how the company had handled safety complaints. However, the review did extend credit to her for driving improvements within the organisation from March onwards. Travelodge has also been credited with making changes since that point, though Greaney's findings make clear that significant work remains to be done before guests can be confident in their safety.

Travelodge issued an apology to the woman, saying it was "unreservedly" sorry for what had happened to her. The company has not yet indicated how it intends to respond to the review's broader findings, particularly regarding the absence of a specific policy on violence against women and girls and the continued prevalence of room intrusions.

The review raises important questions about how large hospitality chains manage guest safety, particularly around the issuing of room keys. The fact that a receptionist with no key security training could hand over access to a room based solely on a verbal claim, without any verification process, points to a fundamental gap in standard operating procedures that could affect any guest at any hotel where similar practices exist.

For victims of crimes in hospitality settings, the review also highlights the importance of complaints being escalated properly and handled by individuals without conflicts of interest. The fact that the woman's email sat unread by the chief executive for over three years, and that her complaint was investigated by someone criticised within it, suggests that corporate accountability mechanisms failed at precisely the moment they were most needed.

The woman at the centre of this case has demonstrated considerable courage in pursuing accountability, first by contacting the BBC and then by engaging with the independent review process. Her actions have prompted changes at Travelodge, sparked a national conversation about hotel room security, and led to political pressure at the highest level of government. Whether those changes prove sufficient to prevent similar attacks in future will depend on how thoroughly the company implements the review's recommendations.

The review's findings serve as a warning to the wider hospitality industry that guest safety cannot be treated as an afterthought. When security procedures are inadequate, staff are untrained, and complaints are mishandled, the consequences can be devastating. Travelodge now faces the challenge of rebuilding trust with the public, demonstrating that the culture Greaney identified has been genuinely transformed rather than merely acknowledged.