Independent Review Finds Travelodge 'Fundamentally Failed' Woman Sexually Assaulted After Attacker Was Handed Her Room Key

An independent review has concluded that Travelodge "fundamentally failed" a woman who was sexually assaulted by a man who obtained a key to her hotel room, with the barrister leading the inquiry finding that the chain's security policies at the time were "not fit for the purpose of keeping guests safe".

Barrister Paul Greaney KC published his findings on Thursday, following an examination of the circumstances surrounding the attack at the company's Maidenhead hotel in December 2022. His report delivers a damning assessment of the budget hotel operator's systems, culture and complaint-handling procedures, while also acknowledging improvements made since March of this year.

The assault was carried out by Kyran Smith, who tricked reception staff into giving him access to the woman's room by falsely claiming to be her boyfriend. Smith was jailed for seven-and-a-half years in January for the attack. The review revealed the key was handed over less than three minutes after he approached the reception desk, and that the receptionist involved had received no training in key security.

Greaney's report placed responsibility firmly at the organisational level rather than with individual frontline employees. He said blame rested with Travelodge as a company, and that a culture had developed inside the business in which room intrusions were treated as "one of those things" rather than as serious security failures demanding urgent action.

The review found that concerns about guest safety remain unresolved, with room intrusions reported at nearly one in 10 Travelodge hotels during the summer. It also identified that the company had no specific policy in place addressing violence against women and girls, a gap that campaigners have long argued leaves female guests disproportionately exposed to risk in the hospitality sector.

Compounding the original security failure was what the review described as a deeply flawed response to the victim's complaint. The woman emailed Travelodge in January 2023, addressing her concerns to chief executive Jo Boydell and other senior figures. The review concluded that the email was handled by Boydell's office without her knowledge and did not reach the chief executive's attention until March 2026 — more than three years after it was sent.

Instead of being escalated, the complaint was investigated by a manager who had himself been criticised within it — a clear conflict of interest that the review highlighted as evidence of a broken internal process. The customer services team subsequently offered the woman a refund for her night's stay, which she understood to be worth £30. The review's findings suggest this response failed to recognise the severity of what had happened to her.

Travelodge has apologised "unreservedly" to the woman. The company has also been credited in the review for making changes since March, when the issues were finally escalated to senior leadership.

Boydell stepped down as chief executive in August following mounting criticism over how the company handled safety complaints. The review stated that she deserved credit for driving improvements from March onwards, even as it laid bare the years of inaction that preceded her direct involvement.

The review's publication raises broader questions about safety standards across the UK's budget hotel sector, where high staff turnover, minimal training and pressure to deliver quick check-ins can create vulnerabilities. Greaney's finding that room intrusions were treated as routine underscores how cultural attitudes within an organisation can prove as dangerous as any individual lapse in procedure.

For the victim, the review's conclusions confirm what her complaint had alleged from the outset: that she was let down repeatedly — first by a receptionist who handed over a key without verification, then by a complaints process that failed to investigate properly, and finally by a leadership structure that kept her concerns from reaching the top for years. The £30 refund offer, set against the trauma of a sexual assault, has become a symbol of that systemic failure.

Travelodge said it accepted the review's findings and reiterated its apology. The company has pointed to changes introduced since March, which the review acknowledged, though it also made clear that guests were still not as safe as they should be at the time of publication.

The case adds to growing scrutiny of how hospitality businesses handle safety incidents involving female guests. Campaigners have argued that hotels need mandatory training on key security, clear escalation routes for serious complaints, and dedicated policies on violence against women and girls — measures that the Maidenhead review shows were absent at Travelodge during the period in question.

Greaney's report is likely to intensify pressure on the wider industry to adopt consistent minimum standards. With room intrusions still being recorded at roughly one in 10 Travelodge sites this summer, the review suggests the problem is not confined to a single hotel or a single night, but reflects deeper structural weaknesses that require sustained attention from management.

For the woman at the centre of the case, the independent review represents official confirmation that her treatment was unacceptable. Whether it leads to lasting change across Travelodge's estate, and across the sector more broadly, will depend on how rigorously the company and its competitors act on the lessons set out in Greaney's findings.