The Hilton hotel chain was accused of improperly handling two distinct cyberattacks that resulted in the exposure of its customers' financial information, and as a result, it agreed to pay Vermont and New York $700,000. According to the inquiry, thieves put denial-of-service malware on Hilton's payment systems, which would have exposed cardholders' personal information. The business is held accountable for the customers' delayed notice and is charged with having a payment method with inadequate security. Hilton will improve the security of its payment systems and internal incident response protocols as part of the settlement.

The credit card details of numerous customers were leaked after common point-of-sale registers in gift shops and restaurants at a large number of Hilton Hotel was compromised. Hilton hotel apologized to all the customers and investigated the incident with the data security team. The hotel was also fined $700K for the breach.

In November 2015, the California Office of the Attorney General disclosed that Hilton Worldwide suffered a malware-driven data breach targeting its point-of-sale (POS) systems. The attack compromised payment card data of customers who made transactions at Hilton hotels during two distinct periods: November 18–December 5, 2014, and April 21–July 27, 2015. The exposed information included cardholder names, payment card numbers, security codes, and expiration dates, though addresses and PINs remained unaffected. The breach stemmed from unauthorized malware infiltrating Hilton’s POS environment, enabling attackers to harvest sensitive financial details during transactions. While the exact number of affected customers was not specified, the prolonged exposure window heightened risks of fraudulent card activity, identity theft, and financial losses for victims. Hilton took remedial actions, including enhancing payment security protocols and collaborating with law enforcement. However, the incident underscored vulnerabilities in hospitality sector cybersecurity, particularly in safeguarding customer financial data against evolving malware threats. The breach did not involve ransomware or broader systemic disruptions but focused solely on payment card exploitation during the specified timeframes.