Starwood Hotels & Resorts Worldwide, Inc. disclosed a malware intrusion affecting point-of-sale systems at a limited number of North American hotels between November 2014 and October 2015. The malware collected payment card data (cardholder name, number, security code, expiration date). Starwood engaged forensic experts and law enforcement, secured the systems, and offered one year of free credit monitoring and identity protection to affected customers.