HEI Hotels & Resorts

HEI Hotels & Resorts notified the New Hampshire Attorney General of a security incident involving point-of-sale malware installed on payment processing systems at multiple Marriott, Hyatt, and Westin properties. The malware captured payment card data (account number, expiration, verification code) for transactions between December 2, 2015, and June 21, 2016. HEI engaged forensic experts, disabled the malware, and separated payment processing from its network. The exact number of affected individuals is unknown.

HEI Hotels & Resorts notified California AG of a security incident affecting payment card data (account numbers, expiration, verification codes) at multiple properties between March 2015 and June 2016. Malicious software installed on payment processing systems captured data. Incident contained; forensic experts engaged; law enforcement notified.