Make that 1,200 hotels -- not 12 -- that were infected with malware seeking customer payment card data.