Credit, Debit Card Data Stolen From 20 Hotels Across The Country: Full List

If you've stayed at a hotel over the last year and a half, you may want to check your credit card and bank statements for any suspicious activity.

Credit and debit card data were stolen from 20 U.S. hotels across the country. The hotels are operated by HEI Hotels & Resorts and include Marriott, Hyatt, Westin, Sheraton and other major brands.

The breach occurred at hotels from Boca Raton, Florida, to San Francisco, California, between March 2015 and June of 2016. The stolen data included names, credit card numbers, expiration dates and verification codes, more than enough information for thieves to make fraudulent purchases under someone else's name.

Here's the full list, along with the hotel's address and impacted dates:

California

• Hyatt Centric Santa Barbara; 1111 E. Cabrillo Blvd., Santa Barbara, Calif. 93103; 12/26/2015-6/21/2016
• Le Meridien San Francisco; 333 Battery St., San Francisco, Calif. 94111; 3/1/2015-6/7/2015; 12/2/2015-6/8/2016
• Renaissance San Diego; Downtown Hotel 421 W. B St., San Diego, Calif. 92101; 12/26/2015-5/2/2016
• San Diego Marriott La Jolla; 4240 La Jolla Village Dr., La Jolla, Calif. 92037; 12/26/2015-5/2/2016
• The Westin Pasadena; 191 N. Los Robles Ave., Pasadena, Calif. 92037; 3/3/2015-5/18/2016

Colorado

• The Westin Snowmass Resort; 100 Elbert Lane, Snowmass Village, Colo. 81615; 12/26/2015-4/10/2016

Florida

• Boca Raton Marriott at Boca Center; 5150 Town Center Cir., Boca Raton, Fla. 33486; 3/1/2015-6/7/2015; 12/15/2015-4/11/2016
• Intercontinental Tampa Bay; 4860 W. Kennedy Blvd., Tampa, Fla. 33609; 3/21/2016-6/15/2016
• Royal Palm South Beach Miami; 1545 Collins Ave., Miami Beach, Fla. 33139; 12/23/2015-6/6/2016
• Westin Fort Lauderdale; 400 Corporate Dr., Fort Lauderdale, Fla. 33334; 1/29/2016-4/13/2016

Illinois

• Hotel Chicago Downtown; 333 N. Dearborn St., Chicago, Ill. 60654; 12/26/2015-4/27/2016

Minnesota

• The Hotel Minneapolis Autograph Collection; 215 4th St. South, Minneapolis, Minn. 55401; 3/1/2015-4/27/2016
• The Westin Minneapolis; 88 South 6th St., Minneapolis, Minn. 55402; 9/2/2015-6/17/2016HEI

Pennsylvania

• The Westin Philadelphia; 99 S. 17th St., Philadelphia, Pa. 19103; 3/10/2016-6/6/2016

Tennessee

• Sheraton Music City Hotel; 777 McGavock Pike, Nashville, Tenn. 37214; 3/1/2015-6/8/2016

Texas

• Dallas Fort Worth Marriott Hotel & Golf Club; 3300 Championship Pkwy., Fort Worth, Texas 76177; 12/26/2015-4/28/2016

Vermont

• Equinox Resort Golf Resort & Spa; 3567 Main St., Manchester Village, Vt. 05254; 12/23/2015-5/4/2016

Virginia

• Le Meridien Arlington; 1121 19th St. N., Arlington, Va. 22209; 12/23/2015-4/28/2016
• Sheraton Pentagon City; 900 S. Orme St., Arlington, Va. 22204; 3/3/2015-6/7/2015; 12/2/2015-6/13/2016

Washington, D.C.

• The Westin Washington, D.C. City Center; 1400 M St. NW, Washington, D.C. 20005; 11/15/2015-5/28/2016

HEI reported that the breach happened at point-of-sale terminals that were infected with malware. The company doesn't store the credit and debit information from those terminals, so potential victims will not be notified by HEI, the company said.

Instead, the company said in a statement, "We recommend that you carefully check credit reports for accounts or inquiries you do not recognize."

"If you see anything you do not understand, call the credit agency immediately. If you find any suspicious activity on the credit reports, call your local police or sheriff's office, and file a police report for identity theft and get a copy of it. You may need to give copies of the police report to creditors to clear up credit records."

HEI added that "the incident has now been contained and individuals can safely use payment cards at all of our properties."

Beyond checking credit card and bank statements, HEI said to check your credit report to make sure that thieves have not opened new credit cards in your name.

With reporting from Bea Karnes

Image via Shutterstock