So, a hotel we’ll be staying at in the future for a hockey tournament sent us an email to verify check in in/out date information. They sent this email to us, and many other teams that are at the same hotel. The email they sent out contained FULL CREDIT CARD INFORMATION for every person from every team staying at the hotel.
What we’ve done: canceled cars, notified team, notified hotel. Hotel thus far is unconcerned.