HEI Hotels & Resorts

HEI Hotels & Resorts notified Montana AG of a malware incident affecting payment card data (names, account numbers, expiration dates, verification codes) at multiple properties. Unauthorized individuals installed malicious software on payment processing systems. Incident occurred between March 2015 and June 2016. HEI engaged forensic experts, disabled malware, isolated payment systems, and contacted law enforcement. Incident is contained.

HEI Hotels & Resorts notified the New Hampshire Attorney General of a security incident involving point-of-sale malware installed on payment processing systems at multiple Marriott, Hyatt, and Westin properties. The malware captured payment card data (account number, expiration, verification code) for transactions between December 2, 2015, and June 21, 2016. HEI engaged forensic experts, disabled the malware, and separated payment processing from its network. The exact number of affected individuals is unknown.

HEI Hotels & Resorts disclosed a security incident involving malicious software installed on payment processing systems at certain managed properties. The malware captured payment card information, including names, account numbers, expiration dates, and verification codes, from point-of-sale terminals. The breach occurred between March 2015 and June 2016. HEI engaged forensic experts, disabled the malware, and transitioned to a standalone payment system. The incident has been contained.