California AG SB24-65066: Island Hotel Company Limited (Atlantis, Paradise Island) reported a data security incident between March 9, 2016, and October 22, 2016. Malware captured credit and debit card data (card number, expiration, CVV, cardholder name) from POS systems at food and beverage and retail locations. The Resort engaged forensic experts, removed the malware, and implemented additional security procedures. No PIN or SSN data was involved.