LAS VEGAS (AP) — A Las Vegas company that owns casinos in four states including Iowa, says a data breach has compromised customer credit and debit card information. Affinity Gaming said Friday that its system was infected with malware that compromised card data from customers at its 11 casinos, including five in Nevada, three in Colorado, two in Missouri and the Lakeside Casino in Osceola, Iowa.

The company recommends that customers who visited the casinos between March 14 and Oct. 16 check their card statements for suspicious activity and put a fraud alert on their accounts. Affinity also announced a separate breach at Primm Center Gas Station, located in Primm, Nev., near the California state line. Company officials say skimmers that read card data were placed on three gas pumps on an unknown date. The situation was cleared Nov. 29.