Orlando hotel firm Rosen Hotels & Resorts has warned customers of a data breach on its card payment systems.
The company said it discovered the infraction last month after some guests reported unauthorized activity on their accounts.
After an investigation by a cyber-security expert, malware was found on the system and "in some instances the malware identified payment card data that included cardholder name, card number, expiration date, and internal verification code," a Rosen statement said.
The malware may have impacted transactions during an 18-month period between September 2, 2014 and February 18, 2016, at its seven Central Florida properties, it said.
Rosen is asking customers to monitor their accounts and report any suspicious activity to their bank.
Enhanced security measures have been implemented to prevent any future attacks, it said.
