iPhone 14 Pro vs. Galaxy S22 Ultra HP Pavilion Plus Planet Crossword Pixel Watch Apple Watch Ultra AirPods Pro 2 iPhone 14 Pro Camera Best Android Phones
Want CNET to notify you of price drops and the latest stories?
No, thank you

Malware strikes Starwood, Marriott and Hyatt hotels, exposing customer card data

Guests at 20 hotels in the US could have had their bank card details stolen.

The affected properties belong to some of the world's biggest hotel chains.
Spencer Platt, Getty Images

Hotel operator HEI Hotels and Resorts reported on Monday that 20 US hotels it runs have suffered a major data breach that may have divulged customer bank card data.

The affected hotels include properties from the Marriott, Hyatt, Intercontinental and Renaissance chains, as well as Starwood properties in the Le Meridien, Sheraton and Westin chains. HEI has posted a full list online.

Malware found on the company's systems could have been used to steal data from customers using cards to pay at any point-of-sale terminals across the properties, the company said. About 8,000 transactions took place in the period the systems were affected, which was between March 1, 2015 and June 21, 2016.

HEI apologized for incident, saying that it has "mounted a thorough response to investigate and resolve this incident, bolster our data security, and support our customers." The incident has been contained, the company added, and customers can now use their cards at any of the hotels targeted in the attack.