Hotel guests at risk after new data breach