Piling on to the misreported news, are the door locks themselves actually network devices? I was under the impression that the door locks were static devices and the key cards were reprogrammed to say "let me into this room".
Can a malicious agent actually prevent previously working key cards from working (during the guest's stay - I know there is a time limit encoded on the key cards) or just prevent new cards from being programmed?