Twenty HEI properties suffered a data breach of payment information. HEI is a hotel owner/operator and has branded hotels under Marriott, InterContinental, Starwood, and Hyatt.

HEI posted a list of the properties, which includes an Equinox, two Le Meridiens, six Westins, and others. The company also posted a notice on its website.

Individual hotels don't seem to be communicating much; for example, the Boca Raton Marriott and Westin Philadelphia websites aren't displaying the typical breach notices. These brands may be smart to leave the trouble with HEI.

Discussion Starters:

• What's your assessment of HEI's message? What principles of business writing are followed? Who is the audience, and how well are their needs met?
• What are the most important messages for customers to hear after a data breach?
• Should individual properties do more? Why or why not?