HEI Hotels & Resorts runs such hotels as Hyatt, Westin, and Marriott and now it has joined Hilton, Starwood, Omni, and Trump Hotels in announcing malware has penetrated its point-of-sale (POS) systems. Thus far, the company disclosed that 20 of its locations were affected. The locations are across the United States.
Anyone who used payment cards at any restaurants, gift shops, spas, or any other POS machine in the affected properties should watch out for fraudulent charges on their statements for at least the next year. Although the company stated PINs were not compromised, it’s still safer to change those if the card was used as a debit. Report anything suspicious to the card issuer right away.
Information that was stolen included cardholder names, card numbers, expiration dates, and the verification codes associated with the cards.
According to the list of breached locations listed on HEI’s website, the malware was on the systems starting in March 1, 2015 and went on through June 21, 2016. It is currently unknown how many cards were affected because it’s normal for a guest to use the same card multiple times. An investigation is ongoing and the malware was removed from their systems.
A list of the twenty hotels has been posted to HEI’s website. Since they do not store card numbers, they don’t know the individuals whose cards were part of this breach and cannot contact them. As far as has been reported, no credit or identity theft protection services have been made available to potential victims as a result of this breach.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
