Newsroom

Two hotel chains have been hit by point-of-sale malware attacks compromising customers' names, payment card numbers and security codes, according to CUInfoSecurity.

Denver-based Millennium Hotels & Resorts North America said all 14 of its locations' food-related POS systems were hit between early March and mid-June. Noble House Hotels and Resorts also said its Key West location, Ocean Key Resort & Spa, was hit by a POS breach lasting from April 26 to June 8.

A Noble location in Minneapolis was also hit by a data breach in 2015.

Millennium estimates fewer than 5,000 cards were affected by its breach. Noble is saying as many as 12,134 payment cards may have been affected by its Key West breach.

NAFCU continues to call for lawmakers to move forward with H.R. 2205/S. 961, the "Data Security Act," which would set national data security standards and hold merchants accountable for breaches of consumers' sensitive and personally identifiable data.