Hyatt Hotels has revealed the scale of its recently reported data breach, with 250 locations hit by a malware infection.
Hyatt has completed the investigation of the data breach first reported in December and confirms payment card information was accessed from point of sales systems in various retail outlets.
The breach impacted locations in 50 countries between July 13 and December 8, 2015, and harvested customer credit card numbers, names, expiration dates and verification codes, the company said.
US locations include hotels in Phoenix, San Francisco, Hawaii, Boston, New York and Seattle.
"Protecting customer information is critically important to Hyatt, and we take the security of customer data very seriously," Hyatt global president of operations Chuck Floyd said.
We have been working tirelessly to complete our investigation, and we now have more complete information that we want to share so that customers can take steps to protect themselves."
Hyatt has advised affected customers to monitor statements for any unauthorized transactions and is offering a free identity protection service.
The company says it has installed additional anti-fraud measures to prevent future attacks.
