Local

Malware attack may have compromised credit card info at Florida hotels, company says

Westin Fort Lauderdale (Photo: HEI Hotels & Resorts)

NORWALK, Conn. — Visitors staying at four Florida hotels may have had their personal information compromised after malware was installed at payment processing systems, HEI Hotels & Resorts said.

The malicious software was found in point-of-sale terminals, such as food and beverage outlets, at certain HEI managed properties, the company said in a release.

Twenty hotels and resorts in 10 states were affected, including the four in Florida, HEI said.

The malware may have given hackers access to the cardholder’s name, account number, card expiration date and verification code, HEI said.

“We are treating this matter as a top priority, and took steps to address and contain this incident promptly after it was discovered, including engaging outside data forensic experts to assist us in investigating and remediating the situation and promptly transitioning payment card processing to a stand-alone system that is completely separated from the rest of our network,” the company said on its website.

HEI encouraged customers whose information may have been compromised to review their credit reports and keep track of credit and debit card statements to make sure there is no unusual payment activity.

If any potentially fraudulent transactions are found, cardholders should immediately report the discrepancy to the bank or credit card company that issued the card, HEI said.

HEI did not say exactly when the malware was detected.

Florida hotels/resorts affected by the malware attack include:

Boca Raton Marriott at Boca Center, 5150 Town Center Circle, Boca Raton, from March 1, 2015 to June 7, 2015, and Dec. 15, 2015 to April 11, 2016.

Intercontinental Tampa Bay, 4860 W. Kennedy Blvd., Tampa, from March 21, 2016 to June 15, 2016.

Royal Palm South Beach Miami, 1545 Collins Ave., Miami Beach, from Dec. 23, 2015 to June 6, 2016.

Westin Fort Lauderdale, 400 Corporate Dr., Fort Lauderdale, from Jan. 29, 2016 to April 13, 2016.

HEI hotels in Gainesville and Duck Key were not affected by the hack, the company said.

For more information on the malware attack at HEI properties, visit the company's website.

0