Hotel Manager Hid Customer Data Breach in Cyberattack, SEC Says