NAFCU, and cybersecurity experts, reacted to news of a databreach at properties operated by HEI Hotels & Resorts that mayhave disclosed credit card payment data from about 8,000transactions.

HEI Hotels and Resorts reported the breach affected 20 hotels,including 12 Starwood hotels, six Marriott Internationalproperties, one Hyatt hotel and one InterContinental hotel.HEI posted a full listonline. HEI indicated on its website that the malware wasactive from March 1, 2015 to June 21, 2016, with 14 of the hotelsaffected after Dec. 2, 2015.

HEI apologized for the incident, stating, “Unfortunately, likemany other organizations, we recently became aware that several ofour properties may have been the victim of a security incident thatcould have affected the payment card information of certainindividuals who used payment cards at point-of-sale terminals, suchas food and beverage outlets, at some of our properties. We takevery seriously our responsibility to keep our customers'information secure, and have mounted a thorough response toinvestigate and resolve this incident, bolster our data security,and support our customers.”