Newsroom

September 12, 2016

Nashville hotel disclosed 3+-year data breach

Upscale Nashville, Tenn.-based Hutton Hotel disclosed recently that its point-of-sale systems compromised customers' payment card data for more than three years.

The hotel said the malware on its systems could have affected payment card data, including customers' names, account numbers, card expiration dates and verification codes, of those who booked hotel reservations from Sept. 19, 2012 to April 16, 2015, or who made purchases at onsite food and beverage outlets from Sept. 19, 2012 to Jan. 15, 2015 and from Aug. 12, 2015 to June 10, 2016.

Hutton Hotel is managed by HEI Hotels & Resorts, which announced a breach at 20 of its hotels, including Starwood, Marriott, Hyatt and Intercontinental locations, last month.

NAFCU has repeatedly underscored the need for Congress to pass national data security standards for merchants and retailers, such as those found in the "Data Security Act" (H.R. 2205/S.961).