If you ate, golfed, had a spa day, parked or stayed at a Hyatt-managed hotel between August and December 2015, there's a good chance your card details got slurped.