The personal information of almost half a million people is now in the hands of hackers after a security breach of a company used by some of the world's best known hotel brands.