Hyatt yesterday quietly posted a notice on its website informing potential guests that their credit information may have been breached if they have stayed at more than 40 properties worldwide.
This time the hack has been very sever because the breach has happened at the system that processes the payment information for folio expenses. Previous breaches at hotels have happened at outlets such as restaurants that have processed credit card payments.
You can access Hyatt’s website for this breach information here.
Here are the affected properties (Hyatt has made the information difficult to find):
Brazil
Sao Paulo | Grand Hyatt Sao Paulo | March 18, 2017 to July 2, 2017 |
China
Fuzhou | Hyatt Regency Fuzhou, Cangshan | March 18, 2017 to July 2, 2017 |
Guangzhou | Grand Hyatt Guangzhou | March 18, 2017 to July 2, 2017 |
Guangzhou | Park Hyatt Guangzhou | March 18, 2017 to July 2, 2017 |
Guiyang | Hyatt Regency Guiyang | March 18, 2017 to July 2, 2017 |
Hangzhou | Hyatt Regency Hangzhou | March 18, 2017 to July 2, 2017 |
Hangzhou | Park Hyatt Hangzhou | March 18, 2017 to July 2, 2017 |
Jinan | Hyatt Regency Jinan | March 18, 2017 to July 2, 2017 |
Lijiang | Grand Hyatt Lijiang | March 18, 2017 to July 2, 2017 |
Qingdao | Hyatt Regency Qingdao | March 18, 2017 to July 2, 2017 |
Sanya | Grand Hyatt Sanya Haitang Bay | March 18, 2017 to July 2, 2017 |
Shanghai | Andaz Xintiandi, Shanghai | March 18, 2017 to July 2, 2017 |
Shanghai | Grand Hyatt Shanghai | March 18, 2017 to July 2, 2017 |
Shanghai | Hyatt on the Bund, Shanghai | March 18, 2017 to July 2, 2017 |
Shanghai | Hyatt Regency Chongming | March 18, 2017 to July 2, 2017 |
Shanghai | Hyatt Regency Shanghai Wujiaochang | March 18, 2017 to July 2, 2017 |
Shenzhen | Grand Hyatt Shenzhen | March 18, 2017 to July 2, 2017 |
Xiamen | Hyatt Regency Xiamen Wuyuanwan | March 18, 2017 to July 2, 2017 |
Xi’an | Hyatt Regency Xi’an | March 18, 2017 to July 2, 2017 |
Colombia
Cartagena | Hyatt Regency Cartagena | March 18, 2017 to July 2, 2017 |
Guam
Tumon | Hyatt Regency Guam | March 18, 2017 to July 2, 2017 |
India
Pune | Hyatt Place Pune/Hinjawadi | March 18, 2017 to July 2, 2017 |
Indonesia
Bali | Grand Hyatt Bali | March 18, 2017 to July 2, 2017 |
Japan
Tokyo | Andaz Tokyo Toranomon Hills | March 18, 2017 to July 2, 2017 |
Malaysia
Kuala Lumpur | Grand Hyatt Kuala Lumpur | March 18, 2017 to July 2, 2017 |
Mexico
Celaya | Hyatt Place Celaya | March 18, 2017 to July 2, 2017 |
Playa del Carmen | Andaz Mayakoba | March 18, 2017 to July 2, 2017 |
Tijuana | Hyatt Place Tijuana | March 18, 2017 to July 2, 2017 |
Zapopan, Jalisco | Hyatt Regency Andares Guadalajara | March 18, 2017 to July 2, 2017 |
Puerto Rico
Dorado | Hyatt Place Bayamón | March 18, 2017 to July 2, 2017 |
Manatí | Hyatt Place Manatí | March 18, 2017 to July 2, 2017 |
San Juan | Hyatt Place San Juan | March 18, 2017 to July 2, 2017 |
Saudi Arabia
Holy Makkah | Jabal Omar Hyatt Regency Makkah | March 18, 2017 to July 2, 2017 |
Jeddah | Park Hyatt Jeddah – Marina, Club and Spa | March 18, 2017 to July 2, 2017 |
Riyadh | Hyatt Regency Riyadh Olaya | March 18, 2017 to July 2, 2017 |
South Korea
Busan | Park Hyatt Busan | March 18, 2017 to July 2, 2017 |
Seogwipo-Si | Hyatt Regency Jeju | March 18, 2017 to July 2, 2017 |
Seoul | Grand Hyatt Seoul | March 18, 2017 to July 2, 2017 |
United States
Koloa, HI | Grand Hyatt Kauai Resort and Spa | March 18, 2017 to July 2, 2017 |
Lahaina, HI | Hyatt Regency Maui Resort and Spa | March 18, 2017 to July 2, 2017 |
Wailea, HI | Andaz Maui at Wailea Resort | March 18, 2017 to July 2, 2017 |
Conclusion
Hyatt has the worst IT and website of the hotel industry period. Wouldn’t come as a surprise if they had absolutely the worst security implementation as well.
If you have stayed at any of the 40+ properties mentioned above between March and July this year, you should pay attention to the credit card charges coming through as your card may be compromised.