Guests have been warned they could have had money stolen as a consequence.
One expert said there might be further hotels affected.
Buckinghamshire-based IHG had previously reported in February that a dozen US hotels that it managed itself had been affected by the same attack.
“On behalf of franchisees and in co-operation with the payment card networks and acquiring banks, IHG is co-ordinating the investigation that is now under way,” a spokeswoman told the BBC following the latest discovery.
“Individuals should closely monitor their payment card account statements. If there are unauthorised charges, individuals should immediately notify their bank.
“Payment card network rules generally state that cardholders are not responsible for such charges.”
Other affected brands include Hotel Indigo and Candlewood Suites.
Hijacked card data
IHG said an investigation had detected signs the malware had been active at front-desk payment locations at the hotels between 29 September and 29 December 2016.
However, it only has confirmation that the threat was definitely eradicated last month.
The attack hijacked information taken from the payment cards’ magnetic strips as it was being routed through the hotels’ computer servers, said the hotel group.
This could include the card number, expiration date and verification code.
IHG does not believe other guest information was stolen.