Independent hotel management firm White Lodging has announced a suspected seven-month long data breach of point of sale systems at 10 hotels.
The breach took place through POS systems at food and beverage outlets in the hotels from July 3, 2014 through February 6, 2015, the company says.
Transactions made at hotels through other systems are not thought to have been compromised.
White Lodge said the affected hotels in question are Indianapolis Marriott Downtown, Chicago Marriott Midway Airport, Auburn Hills Marriott Pontiac at Centerpoint, Austin Marriott South Airport, Austin, Boulder Marriott, Denver Marriott South, Louisville Marriott Downtown, Renaissance Boulder Flatiron, Courtyard Austin Downtown, and Sheraton Hotel Erie Bayfront, PA.
"After suffering a malware incident in 2014, we took various actions to prevent a recurrence, including engaging a third party security firm to provide security technology and managed services," said Dave Sibley, White Lodging president and CEO.
"These security measures were unable to stop the current malware occurrence on point of sale systems at food and beverage outlets in 10 hotels that we manage."
"We deeply regret and apologize for this situation," he added.
After discovering the breach, an independent forensic review was carried out and the company is continuing to work with law enforcement and credit card companies.
Guests who used a credit card at one or more of the affected hotels’ outlets are being urged to review credit card statements for any rogue transactions.
The company is offering free one-year fraud resolution and identity protection cover to all affected cardholders.
