Atrium Hospitality discovered that a workstation at the Holiday Inn Sacramento was potentially impacted by ransomware. Atrium Hospitality immediately removed the workstation from its network . As part of the investigation, Atrium Hospitality determined that the malware had potentially malicious capabilities. The data compromised are name, driver’s license number, passport number, and credit or debit card information.