Donald Trump's luxury hotel chain has confirmed that malware may have compromised customer credit and debit card data.
In a carefully worded statement, the company says "it appears" that "unauthorized malware" may have accessed card account numbers, expiration dates and security codes.
The confirmation, which comes months after reports of a data breach first surfaced, affects people who stayed in Trump hotels in Chicago, Honolulu, Las Vegas, Miami, New York and Toronto between May 2014 and June 2015.
The malware has been removed and the FBI has been called in, but an independent forensic investigator "did not find evidence that information was taken", says the statement.