Debit, credit cards compromised at Holiday Valley

"Criminal attack" lasted from Oct. 17 to June 2.