Rosen Hotels and Resorts says a data breach may affect customers going back to 2014.

The resort company announced last week that an investigation revealed someone had installed malware on the company's payment card network. The malware searched data from the magnetic stripe on the credit card.

Rosen says in some instances the malware was able to get payment card data but not the cardholder's name. In other cases the malware was able to pick up the cardholder's name, card number, expiration date and internal verification code.

Reports about the possible malware first came in last month, but cards used at Rosen's hotels between Sept. 2, 2014 and Feb. 18 of this year may be affected.

At this point, a Rosen spokesperson said the hotel thinks only point-of-sale machines were affected. It appears hotels across Rosen's company were also affected.

Rosen has set up a toll-free helpline for people who have questions. Customers can call 1-855-907-3214. The call center is open from 8 a.m. to 8 p.m. EST, Monday to Friday.

The company will also be trying to contact potentially affected people.

Rosen Hotels and Resorts runs seven hotels in the Orlando area.

  • Rosen Inn International
  • Rosen Inn
  • Rosen Inn at Pointe Orlando
  • Clarion Inn Lake Buena Vista
  • Rosen Plaza Hotel
  • Rosen Centre Hotel
  • Rosen Shingle Creek Resort