Travelodge "Fundamentally Failed" Woman Sexually Assaulted After Attacker Was Handed Her Room Key, Independent Review Finds

An independent review has concluded that Travelodge "fundamentally failed" a woman who was sexually assaulted by a man who was given a key to her hotel room, with the barrister leading the inquiry finding that the chain's security policies at the time were "not fit for the purpose of keeping guests safe".

Paul Greaney KC, who was appointed to head the review, said the victim was let down "at every stage" of her dealings with the hotel giant, from the night of the attack itself through to the handling of her subsequent complaint. His findings paint a damning picture of an organisation in which room intrusions had come to be treated as routine occurrences rather than serious security breaches.

The assault took place at a Travelodge hotel in Maidenhead in December 2022. Kyran Smith, who obtained a key to the woman's room by falsely telling reception staff that he was her boyfriend, was subsequently jailed for seven-and-a-half years in January. The review established that Smith was handed the key less than three minutes after approaching the reception desk, and that the receptionist who provided it had received no training whatsoever in key security.

Greaney was careful to direct his criticism at Travelodge as a corporate entity rather than at individual members of staff. He said responsibility lay with the organisation, and that a culture had taken hold within the company in which room intrusions were dismissed as simply "one of those things" rather than being recognised as a fundamental failure of the duty of care owed to paying guests.

The review's findings extend well beyond the single incident that prompted it. Investigators discovered that room intrusions were reported at nearly one in ten Travelodge hotels during the summer, suggesting the problem is systemic rather than isolated. The review also found that the company had no policy in place at all addressing violence against women and girls, a gap that experts in safeguarding would regard as a significant omission for a business whose core proposition is providing people with a safe place to sleep.

Compounding the original failure, the handling of the victim's complaint appears to have been equally deficient. The woman emailed a formal complaint to Travelodge in January 2023, addressing it to chief executive Jo Boydell and other senior figures. The review concluded that the email was dealt with by Boydell's office without her knowledge and did not come to the chief executive's attention until March 2026 — more than three years after it was sent.

Instead of being escalated, the complaint was investigated by a manager who was himself criticised within it, an arrangement that raises obvious questions about conflicts of interest and the robustness of the company's internal complaints process. The customer services team subsequently offered the woman a refund for her night's stay, which she understood to amount to £30 — a response that many would regard as woefully inadequate given the severity of what had occurred.

The case only came to widespread public attention in March after the woman contacted the BBC, saying it raised serious questions about room security across Travelodge's estate. Her decision to speak out prompted dozens of other people to come forward with their own experiences of strangers entering their rooms. Among them was a domestic abuse victim whose abuser was given a key to her room at a Travelodge in London, a detail that underscores how security failures can place vulnerable people in acute danger.

The political fallout was swift. Then prime minister Sir Keir Starmer wrote to Boydell in March, urging her to "seriously engage" with the government over security matters. Greaney was appointed to lead the independent review the following month, a move that signalled the seriousness with which ministers viewed the allegations. Boydell stepped down as chief executive in August following sustained criticism of the company's handling of safety complaints.

The review did offer Travelodge some credit, noting that the company has made changes since March and that Boydell deserved recognition for driving improvements during her final months in the role. Travelodge has also apologised "unreservedly" to the woman, acknowledging the extent of its failings. Nevertheless, Greaney's conclusion that guests are still not as safe as they should be indicates that the reforms implemented to date have not yet closed the gaps identified in his report.

For a budget hotel chain operating hundreds of properties across the UK, the findings raise uncomfortable questions about how security is managed at scale. Handing over a room key is one of the most basic trust decisions a hotel makes, and the review suggests that at Travelodge this process was governed by neither adequate training nor clear policy. The absence of any framework addressing violence against women and girls is particularly striking given that hotels are frequently used as temporary accommodation by people fleeing domestic abuse.

The implications stretch beyond one company. The review's revelation that room intrusions were reported at roughly ten per cent of Travelodge hotels over a single summer suggests that guests across the country may have been exposed to similar risks without their knowledge. For victims, the experience described in the report — being failed first by inadequate security and then by a complaints process that minimised the harm — is likely to resonate far beyond this single case.

Travelodge now faces the challenge of demonstrating that the cultural problems identified by Greaney have been genuinely addressed rather than merely acknowledged. The company has said it accepts the review's findings, but restoring public confidence will depend on whether key security training, intrusion reporting, and safeguarding policies are embedded across every property in its portfolio. The woman at the centre of the case, meanwhile, has seen her experience formally validated by an independent inquiry — though no review can undo what happened in Maidenhead in December 2022.