Travelodge "Fundamentally Failed" Assault Victim, Independent Review Finds

An independent review has concluded that Travelodge "fundamentally failed" a woman who was sexually assaulted by a man who obtained a key to her hotel room, with the barrister leading the inquiry finding that the chain's security policies at the time were "not fit for the purpose of keeping guests safe."

Barrister Paul Greaney KC delivered the findings of his review on Thursday, examining the circumstances surrounding the December 2022 attack at Travelodge's Maidenhead hotel, where Kyran Smith gained access to the victim's room after falsely telling reception staff he was her boyfriend. Smith was subsequently jailed for seven-and-a-half years in January.

According to the review, Smith was handed the key less than three minutes after approaching the reception desk. The staff member who provided the key had received no training in key security, a detail Greaney highlighted as indicative of systemic organisational failures rather than individual negligence.

Greaney placed responsibility squarely with Travelodge as a company, stating that a culture had developed within the organisation in which room intrusions were regarded as "one of those things." He emphasised that blame should not be attributed to individual staff members but rather to the chain's broader failure to establish and enforce adequate safety protocols.

The review's findings paint a troubling picture of Travelodge's response to the incident. The victim sent an email complaint to Travelodge in January 2023, addressed to chief executive Jo Boydell and other senior figures. However, the review determined that the email was handled by Boydell's office without her knowledge and did not come to the chief executive's attention until March 2026 — more than three years after it was sent.

Instead of being escalated appropriately, the woman's complaint was investigated by a manager who had himself been criticised within it. The customer services team subsequently offered her a refund for her night's stay, which she understood to be approximately £30. The review described this handling as inadequate given the severity of the incident.

Boydell stepped down as chief executive in August following sustained criticism over the company's handling of safety complaints. However, the review did credit her with driving improvements from March 2026 onward, acknowledging that changes made this year had been implemented quickly, "albeit years too late."

The attack gained national attention in March 2026 after the woman contacted the BBC, saying her case raised serious questions about room security across Travelodge's hotel network. Following that coverage, dozens of people came forward to share their own experiences of strangers entering their hotel rooms. Among them was a domestic abuse victim whose abuser was given a key to her room at a Travelodge in London.

The political ramifications were swift. Then prime minister Sir Keir Starmer wrote to Boydell in March, urging her to "seriously engage" with the government over security concerns. Greaney was appointed to lead the independent review the following month.

The review found that room intrusions were reported at nearly one in 10 Travelodge hotels during the summer of 2026, suggesting the problem remained widespread despite increased scrutiny. It also noted there was no specific policy in place addressing violence against women and girls — an omission that Greaney indicated was significant given the nature of the Maidenhead attack.

Travelodge responded to the review by apologising "unreservedly" to the woman. The company acknowledged the findings and said it was committed to implementing the recommended changes. The review did note that Travelodge's new key security policy would prevent a repeat of the Maidenhead attack if applied correctly.

However, the review found that the new policy was "not being applied with anything like sufficient consistency on the ground." To test compliance, mystery shoppers attempted to gain access to rooms at five Travelodge hotels, including the Maidenhead location. At all five hotels, they were able to enter rooms through housekeeping staff without being directed to reception or asked to provide proof they were entitled to enter. At three of the hotels, staff confirmed that a guest was staying there, and at two properties, room numbers were said aloud during check-in — a practice that could compromise guest privacy and safety. The Maidenhead hotel scored worst among the five tested.

The findings suggest that while Travelodge has made procedural changes at a corporate level, translating those policies into consistent practice across its estate remains a substantial challenge. The review's authors indicated that without sustained oversight and training, the gap between policy and practice could persist.

For the victim at the centre of the case, the review's conclusion that she was failed at every stage represents a formal acknowledgment of the systemic issues she had sought to highlight since 2023. Her decision to contact the BBC ultimately catalysed the independent inquiry, the departure of the chief executive, and a broader national conversation about hotel security and the safety of women in public accommodation.

The review's findings also raise questions about the wider hospitality industry, where similar key security vulnerabilities may exist. Greaney's report suggests that the problems identified at Travelodge could reflect broader cultural attitudes toward guest safety that extend beyond a single chain.

Travelodge has said it will continue implementing the review's recommendations and will report on progress in the coming months.