Mandarin Oriental disclosed a malware attack affecting multiple hotel properties globally, including locations in the US, UK, Switzerland, and Hong Kong, between June 18, 2014, and March 12, 2015. The incident resulted in the unauthorized acquisition of guest names and credit card numbers. The company engaged forensic investigators and law enforcement, removed the malware, and offered 12 months of identity protection to affected guests.