Make that 1,200 hotels — not 12 — that were infected with malware seeking customer payment card data.