HEI Reports Payment Card Breach at 20 US Hotels

Patrick Clarke
by Patrick Clarke
Last updated: 10:25 AM ET, Mon August 15, 2016

Malware has been found at more than a dozen prominent hotels across the U.S.

Hotel operator HEI Hotels & Resorts recently revealed that Hyatt, Marriott and Starwood properties in 10 states and the District of Columbia have been targeted by hackers.

"HEI was recently alerted to a potential security incident by its card processor," the Norwalk, Connecticut-based company said in a statement. "Based upon an extensive forensic investigation, it appears that unauthorized individuals installed malicious software on our payment processing systems at certain properties designed to capture payment card information as it was routed through these systems."

HEI said the malware discovered on hotel payment systems may have collected names, card account numbers, card expiration dates and verification codes. The breach dates back to early December 2015 and continued through late June 2016.

However the breach may have begun as early as March 2015 at some properties where guests purchased food and beverage with a card.

HEI has since contained the malware and is now urging "customers to remain vigilant and continue to monitor statements for unusual activity going forward."

"We take very seriously our responsibility to keep our customers' information secure, and have mounted a thorough response to investigate and resolve this incident, bolster our data security, and support our customers," said HEI. "We are pleased to report that the incident has now been contained and individuals can safely use payment cards at all of our properties."

Notable affected hotels include the Westin Minneapolis, Westin Philadelphia, Hotel Chicago Downtown and the Le Meridien San Francisco, among others.

HEI apologized to customers for the incident and said it will continue to work to enhance its security measures in the future.

While undoubtedly troubling, HEI is just the latest in a growing list of hotel companies to be impacted by payment card data-stealing malware.


For the latest travel news, updates and deals, subscribe to the daily TravelPulse newsletter.

Topics From This Article to Explore

More From TravelPulse

Related Videos

Patrick Clarke

Patrick Clarke

Senior Editor

A Maryland native and wanderer who has lived across the U.S. from North Carolina to SoCal, Patrick Clarke graduated from Towson University with a B.S. in journalism. He previously worked for Bleacher

Grow Your Travel Business With Certified Courses

Travel Agent Academy
Travel Agent Academy
Majestic Resorts Specialist ProgramDiscover all-inclusive luxury at Majestic Resorts in paradise.
Travel Agent Academy
Travel Agent Academy
Allianz Specialist ProgramProtect every journey with Allianz Partners Travel Insurance.
Travel Agent Academy
Travel Agent Academy
Los Cabos Specialist ProgramSell the magic of Los Cabos: luxury, adventure, and endless sunshine.
Travel Agent Academy
Travel Agent Academy
Majestic Resorts Specialist ProgramDiscover all-inclusive luxury at Majestic Resorts in paradise.
Travel Agent Academy
Travel Agent Academy
Allianz Specialist ProgramProtect every journey with Allianz Partners Travel Insurance.
Travel Agent Academy
Travel Agent Academy
Los Cabos Specialist ProgramSell the magic of Los Cabos: luxury, adventure, and endless sunshine.

Don't Miss These Travel Agent Events and Trainings

Upcoming Webinar
MSC Cruises Exclusive Preview: New MSC World Atlantic Reveal & MoreWednesday, October 21, 2026
2:00pm Eastern
As we approach the one-year countdown to the highly anticipated arrival of MSC World Atlantic, join...
Upcoming Webinar
Mexico for the Western Traveler Part 1: 2026Thursday, October 22, 2026
2:00pm Eastern
Join Travel Weekly, TravelAge West and TravelPulse in the virtual studios for Discover Mexico for the...
Upcoming Webinar
Europe Made Easy: Sell with Confidence with Classic VacationsFriday, October 23, 2026
2:00pm Eastern
From iconic cities to hidden gems, discover how Classic Vacations helps travel advisors navigate the...
Upcoming Webinar
MSC Cruises Exclusive Preview: New MSC World Atlantic Reveal & MoreWednesday, October 21, 2026
2:00pm Eastern
As we approach the one-year countdown to the highly anticipated arrival of MSC World Atlantic, join...
Upcoming Webinar
Mexico for the Western Traveler Part 1: 2026Thursday, October 22, 2026
2:00pm Eastern
Join Travel Weekly, TravelAge West and TravelPulse in the virtual studios for Discover Mexico for the...
Upcoming Webinar
Europe Made Easy: Sell with Confidence with Classic VacationsFriday, October 23, 2026
2:00pm Eastern
From iconic cities to hidden gems, discover how Classic Vacations helps travel advisors navigate the...