Travelodge "Fundamentally Failed" Woman Who Was Sexually Assaulted After Attacker Was Given Her Room Key, Independent Review Finds

An independent review has concluded that Travelodge failed a woman "at every stage" after she was sexually assaulted by a man who was handed a key to her hotel room, with the barrister leading the inquiry describing the chain's security arrangements at the time as "not fit for the purpose of keeping guests safe."

Paul Greaney KC published his findings on Thursday, examining the circumstances surrounding the December 2022 attack at Travelodge's Maidenhead hotel and the company's wider approach to guest safety. His report is heavily critical of the budget hotel chain's procedures, culture and handling of the victim's complaint in the months and years that followed.

Kyran Smith, who obtained the key by falsely telling reception staff he was the woman's boyfriend, was jailed for seven and a half years in January. The review found reception staff handed him the key less than three minutes after he approached the desk, and that the receptionist on duty had received no training in key security whatsoever.

Greaney placed responsibility for the failure on Travelodge as an organisation rather than on individual employees. He said a culture had taken root in which room intrusions were dismissed as "one of those things" — an attitude he suggested was incompatible with the duty of care a hotel owes to its guests.

The review also examined how the woman's complaint was processed. She emailed Travelodge in January 2023, addressing her concerns to chief executive Jo Boydell and other senior figures. The review concluded that the message was dealt with by Boydell's office without her knowledge and did not reach the chief executive until March 2026 — more than three years later.

Instead, the complaint was investigated by a manager who had himself been criticised within it, raising obvious questions about the independence and fairness of that process. The customer services team subsequently offered the woman a refund for her night's stay, which she understood to be around £30 — a response the review implicitly treats as woefully inadequate given the seriousness of what had happened.

The case only became national news in March 2026, when the woman contacted the BBC, arguing that her experience raised serious questions about room security across Travelodge's estate. Her decision to speak publicly triggered a wave of similar accounts from other guests.

Dozens of people came forward to describe strangers entering their rooms. Among them was a domestic abuse victim whose abuser was given a key to her room at a Travelodge in London — an account that appeared to mirror the Maidenhead case in alarming detail.

The political response was swift. Then prime minister Sir Keir Starmer wrote to Boydell in March, urging her to "seriously engage" with the government over hotel security. Greaney was appointed to lead the independent review the following month.

Boydell stepped down as chief executive in August following sustained criticism of how the company had handled safety complaints. The review nonetheless credited her with driving improvements from March 2026 onwards, and Greaney said she deserved recognition for that work.

Travelodge apologised "unreservedly" to the woman, and the review acknowledged that the company had made changes since March. Greaney said those changes had been implemented quickly, "albeit years too late," and that the company's new key security policy would prevent a repeat of the Maidenhead attack if it were applied correctly.

However, the review found the policy was "not being applied with anything like sufficient consistency on the ground." Mystery shoppers tested five hotels, including Maidenhead, and in every case were able to enter rooms through housekeeping staff without being sent to reception or asked to prove they were entitled to be there. At three of the hotels, staff confirmed that a guest was staying on the premises, and at two properties room numbers were spoken aloud at check-in. Maidenhead scored worst of the five hotels tested.

The report makes 38 recommendations. These include moving towards a system that requires guests to show identification before receiving a room key — an approach Travelodge has been trialling at selected hotels since May 2026. It also recommends body-worn cameras for reception staff, more robust verification that employees have actually absorbed their training, and a requirement that housekeepers always direct guests to reception rather than allowing them into rooms.

Greaney said Travelodge must "urgently" draw up a policy on violence against women and girls, developed in conjunction with the Suzy Lamplugh Trust, and train its entire workforce in it. He also flagged that no such policy existed at the time of the review.

The findings raise broader questions for the UK hospitality sector, where budget chains often rely on high staff turnover and limited security budgets. The review's emphasis on consistency — rather than the mere existence of policies — suggests that written procedures alone offer little protection if frontline staff are not supported to follow them. For the victim, the report confirms what she has argued since 2023: that the failure was systemic, and that it continued long after the night of the attack.