Follow CBSMIAMI.COM: Facebook | Twitter

NEW YORK (CBSMiami/AP) — Travelers who stayed at Hyatt, Sheraton, Marriott and Westin hotels in Florida and nine other states, and the District of Columbia, may have had their credit card information hacked.

READ MORE: New Travel Restrictions In Place, Dow Drops 905 Points Over New COVID Variant Concerns

According to the hotel operator HEI Hotels & Resorts, malware put into place in at least 20 locations may have collected names, card account numbers, card expiration dates and verification codes.

Data from customers may have been collected from early December, through late June. At some properties, HEI said, data collection may have begun as early as March 2015 at hotel locations where people bought food or drinks.

“We are treating this matter as a top priority, and took steps to address and contain this incident promptly after it was discovered,” according to a statement from HEI.

READ MORE: Black Friday Shoppers Out Early Hoping To Score Deals

Once it found out about the problem, HEI said it transitioned payment card processing to a stand-alone system that’s completely separate from the rest of its network. It disabled the malware and is in the process of reconfiguring various components of its network and payment systems to make them more secure.

The company said it’s continuing to cooperate with the law enforcement investigation and coordinating with banks and payment card companies.

Anyone who used a card at HEI hotels in the given time frame should review their account statements and look for discrepancies or unusual activity, both over the past several months and going forward, the company said. Customers who notice anything out of place should contact their credit or debit card issuer.

MORE NEWS: Cold Fronts Bring More Than Just Cool Dry Air To South Florida

(TM and © Copyright 2016 CBS Radio Inc. and its relevant subsidiaries. CBS RADIO and EYE Logo TM and Copyright 2016 CBS Broadcasting Inc. Used under license. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed. The Associated Press contributed to this report.)