HYATT HOTELS CORPORATION

Hyatt Place New York / Chelsea Hotel

Hyatt Hotels Corporation disclosed unauthorized access to payment card information (card numbers, expiration dates, verification codes) at certain managed locations between March 18, 2017, and July 2, 2017. The incident affected a small percentage of guests who checked in during this period. Hyatt engaged third-party experts and authorities to investigate and resolved the issue.

Hyatt Hotels Corporation reported unauthorized access to payment card information at certain Hyatt-managed locations between March 18, 2017, and July 2, 2017. The incident involved cardholder name, card number, expiration date, and internal verification code from cards manually entered or swiped at the front desk. Hyatt engaged third-party experts and authorities to investigate and implemented enhanced cybersecurity measures. The specific payment cards affected could not be identified.

Hyatt Hotels Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-10-12. 501 Massachusetts residents were affected. The report records the breach type as electronic.

Hyatt Hotels Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2017-10-12. The breach occurred during 3/18/2017 - 7/2/2017. The breach was discovered on 7/7/2017. 24,599 individuals were affected. Notice was sent on 10/12/2017.

Hyatt Hotels Corporation notified the Washington AG of a cyberattack involving skimmers at hotel front desks. Unauthorized access to payment card data (names, numbers, CVVs) occurred between March 18 and July 2, 2017. Hyatt discovered the incident on July 7, 2017, and began notifying affected individuals, including 640 Washington residents, on October 12, 2017.

Hyatt Hotels Corporation notified the NH Attorney General of a security incident affecting 28 NH residents. Unauthorized access to payment card data (names, numbers, CVVs) occurred at certain managed/franchised locations between March 18 and July 2, 2017. Hyatt discovered suspicious activity on July 7, 2017, engaged third-party experts, and began notifying affected individuals on October 12, 2017.

Hyatt Hotels Corporation disclosed a payment card incident involving malware that collected cardholder data (name, number, expiration, verification code) from onsite payment processing systems at certain locations. The unauthorized access occurred between July 30, 2015, and December 8, 2015. Hyatt engaged third-party security experts, notified law enforcement, and offered one year of fraud detection services to affected customers.

Hyatt Hotel Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-01-15. 9 Massachusetts residents were affected. The report records the breach type as electronic.

Hyatt Hotels Corporation notified Washington AG of a malware incident targeting payment card data at select locations between Aug 13 and Dec 8, 2015. 15 Washington residents were identified with track 1 data exposure. Hyatt engaged third-party experts, notified law enforcement, and offered one year of credit monitoring.

Hyatt Hotels Corporation disclosed a malware incident affecting payment card data at certain managed locations, primarily restaurants, between July 30, 2015, and December 8, 2015. Malware collected cardholder name, card number, expiration date, and verification code from onsite transactions. The investigation is complete, and systems have been secured. No other customer information was affected.

Hyatt Hotels Corporation completed an investigation into a payment card incident involving malware that collected cardholder data from onsite payment processing systems at certain locations between July 30, 2015, and December 8, 2015. Hyatt engaged third-party experts, notified law enforcement and card networks, and offered one year of fraud protection services to affected customers.