HERSHEY, Pa. – Hershey Entertainment & Resorts says a data breach may have exposed the financial information of some visitors to its Pennsylvania hotels, amusement park and other venues.
The company says a program was installed in its payment system that extracted payment card data, including a cardholder's name, card number and expiration date. Cards used at its properties between Feb. 14 and June 2 may have been compromised.
Hershey, which operates The Hotel Hershey, Hersheypark Entertainment complex and other facilities, did not find evidence that information was removed from its system. However, some guests have reported unauthorized charges on cards used at its properties.
The company is working with a security firm to resolve the issue and is offering a year of card monitoring service to affected guests.