Hotel owner and operator HEI Hospitality has warned patrons about a data breach at some of its hotels, in which credit card data may have been stolen.
In a letter to customers published at the New Hampshire Department of Justice’s website, HEI said it suspected theft of credit card information at the Algonquin Hotel in New York between March 25 and April 17.
HEI stated that it believed the property management system at check-in and the point-of-sale system was breached. The restaurant, bar and gift shop use the point-of-sale system.
The company provided a list of other hotels where point-of-sale data systems were breached between March 25 and April 17: Marriott Fullerton at California State University; Detroit Marriott Southfield; Renaissance Fort Lauderdale Port Everglades; Marriott Dallas/Fort Worth at Champions Circle; Atlanta Marriott Norcross; Sheraton Crystal City in Arlington, Va.; Westin Minneapolis; the Equinox in Manchester, Vt.; Sheraton Music City in Nashville; and Westin St. Louis.
HEI said it had no evidence that the front-desk system was compromised at the hotels, except for a terminal at the Sheraton Crystal City.
"Upon learning of this incident, we engaged a computer security forensic company to assist us, reported the matter to law enforcement and have taken the necessary steps we believe will avoid a reoccurrence," said HEI in the letter, which was dated Sept. 2.
According to the New Hampshire letter, 14 state residents might have been affected by the security breach. HEI indicated that similar notices were sent to other state governments, including those in Maryland, West Virginia, Vermont and North Carolina.