Two more hotel chains have revealed details of separate data breaches targeting point of sale terminals at food and beverage outlets.
All 14 US properties at Millennium Hotels & Resorts North America were infected with malware, while the Ocean Key Resort & Spa in Key West, operated by Noble House Hotels also suffered the same fate.
The two companies were reportedly alerted of the potential card fraud by the U.S. Secret Service, suggesting a single group may be responsible for both breaches.
Millennium said ‘food and beverage POS systems’ at all hotels were compromised with malware for a two-month period.
Cardholders’ names, payment card numbers, expiration dates and CVV numbers may have been stolen, it said.
Following the detection, the company ‘addressed malicious code in certain of its legacy point of sale systems and immediately adopted additional security measures.’
"We urge customers who visited our U.S. hotels between early March and the end of June this year to check their payment card records and to report dubious transactions to their card operators immediately," said MHR North American president Shaun Treacy.
"We also urge customers to take advice from their card operators on any further recommended security precautions."
MHR operates hotels in Anchorage, Boston, Boulder, CO, Buffalo, NY, Chicago, Cincinnati, Durham, NC, Los Angeles, Minneapolis, Nashville, New York and Scottsdale, AZ.
Noble House Hotels said it was first notified on July 13, 2016 of a breach in PoS systems at the Ocean Key Resort, affecting outlets including Hot Tin Roof Restaurant, Sunset Pier bar, and LIQUID Pool Bar.
In a message to customers the company promises to ‘reimburse for any such reasonable, documented costs that your financial institution declines to pay.’
NHHR said its systems were compromised between April 26, 2016, and June 8, 2016.
Global tourism exceeds 1.5 billion travelers announces UN-Tourism
Qatar Airways offers reduced timetable to over 60 destinations
WTTC global tourism reached record economic impact of 11 trillion in 2025
Hands In, UATP join forces for airline multi-card payments
Suspension of all regional trains in Catalonia following two new rail accidents in Spain