Catch Hospitality Group

Catch Hospitality Group operates a portfolio of upscale dining establishments in New York City, known by aliases including Catch NYC, Catch Rooftop, and Catch Steak. The group's venues focus on seafood and steakhouse concepts, providing food and beverage service within the premium hospitality sector. Its operations are concentrated in Manhattan, with documented locations including a rooftop lounge and a dedicated steakhouse, serving a metropolitan clientele. The business model centers on experiential dining, combining specific culinary themes with distinctive atmospheres across its restaurant formats. The known footprint is explicitly limited to New York City, with no information suggesting expansion beyond this metropolitan area or indicating a larger national or international chain structure. The group's identity is tied to its branded restaurant concepts rather than a broader conglomerate.

In March 2019, the group experienced a confirmed security incident where malware infected point-of-sale systems at three of its New York City restaurants. The malicious software was designed to capture magnetic stripe track data from customers' payment cards, including card numbers, expiration dates, verification codes, and occasionally cardholder names. This compromise affected patrons who visited the impacted establishments during specific operational periods prior to the systems being remediated. The stolen payment card data could be used to facilitate fraudulent transactions, leading to public warnings for affected individuals to vigilantly monitor their financial accounts for unauthorized charges. The incident was publicly disclosed, illustrating a direct cybersecurity threat to payment processing infrastructure within the hospitality industry. This event is a documented aspect of the organization's operational history, highlighting the vulnerability of point-of-sale environments in high-volume retail settings to data harvesting malware.