HEI Hotels & Resorts (HEI) has reported a data breach at point-of-sale (PoS) terminals of around 20 of its properties across the US, which may have compromised financial details of its customers. The breach hit food and beverage outlets at 20 Starwood, Marriott, Hyatt, and Intercontinental properties.

An initial probe revealed that malware installed at the PoS systems in these properties stole card details of customers between March 1, 2015 and June 21, 2016. The malware was immediately disabled and card processing moved to a stand-alone system. The group says all properties are malware-free now.

A detailed investigation is on and customers have been asked to be alert to unusual activity on card transactions and report it, if any.

For details of the hotels affected and when, see HEI's notice here.