The compromised information included payment card numbers and card security codes for some of the hotel chain's reservations.